Tp Link Kasa Ec70 vulnerabilities

2 vulnerabilities

Known vulnerabilities in Tp Link Kasa Ec70, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5MediumCVE-2026-13230tp-link systems inc. · kasa ec70 v4 +3 moreInformation Disclosure Vulnerability in Local Discovery Response in TP-Link Kasa EC70 and EC71An information disclosure vulnerability was identified in TP-Link Kasa EC70 v4 and EC71 v4 in the local discovery mechanism, which exposes sensitive geolocation information without requiring authentication. This issue allows an attacker on the same local network to retrieve geolocation-related data through crafted responses. The vulnerability impacts confidentiality only, with no evidence of integrity of availability impact.EPSS0.40%8.6HighCVE-2026-9770tp-link systems inc. · kasa ec70 v4 +3 moreHardcoded Cryptographic Key Information Disclosure Vulnerability on TP-Link Kasa EC70 and EC71Kasa EC71 v4 and EC70 v4 firmware contains a static cryptographic private key stored in a read-only filesystem that is shared across devices.  An attacker with access to the firmware image can extract the embedded key.  Successful exploitation may allow an unauthenticated attacker on the same network to use this key in the web management service, compromising the confidentiality of encrypted communications. This may enable passive decryption of traffic or active man-in-the-middle (MITM) attacksEPSS0.31%