Tp Link Tapo H100 vulnerabilities
2 vulnerabilities
Known vulnerabilities in Tp Link Tapo H100, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2025-15557tp-link systems inc. · tapo h100 v1 +3 moreImproper Certificate Validation in TP-Link Tapo H100 and P100 Allows Man-in-the-Middle AttackAn Improper Certificate Validation vulnerability in TP-Link Tapo H100 v1 and Tapo P100 v1 allows an on-path attacker on the same network segment to intercept and modify encrypted device-cloud communications. This may compromise the confidentiality and integrity of device-to-cloud communication, enabling manipulation of device data or operations.EPSS0.20%MediumCVE-2024-10523tp-link · tapo_h100_firmware +1 moreInformation Disclosure Vulnerability in TP-Link IoT Smart HubThis vulnerability exists in TP-Link IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmware and analyzing the binary data to obtain the Wi-Fi credentials stored on the vulnerable device.EPSS0.13%