PT-2024-26517 · Tp Link · Tapo P125M+1

Agatah2333 + 1 · Published 2024-04-30 · Updated 2024-10-30 · CVE-2024-35495

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions TP-Link Kasa KP125M version 1.0.0 Tapo P125M version 1.0.0 Build 220930 Rel.143947

Description An Information Disclosure issue in the Telemetry component allows attackers to observe device state via observing network traffic.

Recommendations For TP-Link Kasa KP125M version 1.0.0, consider restricting network access to minimize the risk of exploitation. For Tapo P125M version 1.0.0 Build 220930 Rel.143947, consider restricting network access to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

BDU:2025-02548

CVE-2024-35495

Affected Products

Tp-Link Kasa Kp125M

Tapo P125M

References · 9

• 🔥 https://github.com/Chapoly1305/tp-link-cve/blob/main/CVE-2024-35495.md · Exploit
• https://bdu.fstec.ru/vul/2025-02548 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-35495 · Security Note
• https://twitter.com/VulmonFeeds/status/1840860991229252054 · Twitter Post
• https://tp-link.com/us/support/download/tapo-p125m · Note
• https://vuldb.com/?id.278874 · Note
• https://twitter.com/CVEnew/status/1840811696450830390 · Twitter Post
• https://tp-link.com/us/support/download/kp125m · Note
• https://t.me/cvedetector/6676 · Telegram Post