PT-2023-25016 · Tp Link · Tp-Link Tapo

Sara Lazzaro + 1 · Publicado 2023-12-27 · Atualizado 2024-01-05 · CVE-2023-34829

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions TP-Link Tapo versions prior to 3.1.315

Description The issue is related to incorrect access control, allowing attackers to access user credentials in plaintext.

Recommendations For versions prior to 3.1.315, update to version 3.1.315 or later to resolve the issue.

Exploit

Correção

Cleartext Transmission of Sensitive Information

Enumeração de Fraquezas

CWE-319

Identificadores relacionados

CVE-2023-34829

Produtos afetados

Tp-Link Tapo

Referências · 6

• 🔥 https://github.com/SecureScripts/TP-Link_Tapo_Hack · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-34829 · Nota de Segurança
• https://twitter.com/CVEnew/status/1740210038336073769 · Publicação no Twitter
• https://t.me/cvenotify/65339 · Publicação no Telegram
• https://t.me/cvenotify/65424 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-34829 · Aviso do Fabricante