Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-72gj-xrp6-846v

Опубликовано: 09 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 4.4

Описание

This vulnerability exists in TP-Link Tapo H200 V1 IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmware and analyzing the binary data to obtain the Wi-Fi credentials stored on the vulnerable device.

This vulnerability exists in TP-Link Tapo H200 V1 IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmware and analyzing the binary data to obtain the Wi-Fi credentials stored on the vulnerable device.

EPSS

Процентиль: 18%
0.00057
Низкий

4.4 Medium

CVSS4

Дефекты

CWE-312

Связанные уязвимости

nvd
10 месяцев назад

This vulnerability exists in TP-Link Tapo H200 V1 IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmware and analyzing the binary data to obtain the Wi-Fi credentials stored on the vulnerable device.

CVSS3: 2.4
fstec
10 месяцев назад

Уязвимость микропрограммного обеспечения центра управления умным домом TP-Link Tapo H200, связанная c хранением информации в открытом виде, позволяющая нарушителю получить учётные данные Wi-Fi

EPSS

Процентиль: 18%
0.00057
Низкий

4.4 Medium

CVSS4

Дефекты

CWE-312