CVE-2025-8627

High CVSS: 8.7

The TP-Link KP303 Smartplug can be issued unauthenticated protocol commands that may cause unintended power-off condition and potential information leak.

This issue affects TP-Link KP303 (US) Smartplug: before 1.1.0.

Vendor

Tp-link

Product

Kp303 Firmware

CWE

CWE-306

Yayın Tarihi

2025-08-25 22:15:33

Güncelleme

2025-09-15 14:24:45

Source Identifier

f23511db-6c3e-4e32-a477-6aa17d310630

KEV Date Added

Kategoriler

CWE-306 Kp303 Firmware HIGH Tp-link 2025

Referanslar

https://www.tp-link.com/us/support/faq/4619/

Benzer Kayıtlar

High

CVE-2026-34122

A stack-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 within a configuration handling c…

High

CVE-2026-34124

A denial-of-service vulnerability was identified in TP-Link Tapo C520WS v2.6 within the HTTP request path parsing logic.…

High

CVE-2026-34118

A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 in the HTTP POST body parsing logi…

High

CVE-2026-34119

A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 within the HTTP parsing loop when…

High

CVE-2026-34120

A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 within the asynchronous parsing of…

High

CVE-2026-34121

An authentication bypass vulnerability within the HTTP handling of the DS configuration service in TP-Link Tapo C520WS v…