Record status Published
Identifier year (not publication year) 2026
Source publication Oct 14, 2026
Source updated Oct 14, 2026
Imported by cveboard Oct 24, 2026
CNA source text (English) Improper Authentication and Credential Exposure in Multiple TP-Link Kasa Devices
Multiple
Kasa devices contain an improper authentication vulnerability in the local
device-management protocol. An unauthenticated adjacent attacker may send
management instructions to an affected device without adequate authentication
or authorization, allowing modification of the device state or management
settings. Under certain usage conditions involving interaction between the
user, mobile application, and device-cloud service, insufficient protection of
account-related communications may also expose account information.
Successful
exploitation may allow an unauthenticated adjacent-network attacker to perform
unauthorized device-management actions and disrupt legitimate user control.
Under certain conditions, account-related information may also be exposed,
potentially leading to compromise of the associated cloud account.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
HS103 v5
Vendor TP-Link Systems Inc.
Product HS103 v5
Platforms Unknown
Default status unaffected
HS103 v5 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom 1.1.3 Build 250908 Rel.112508 Unavailable None listed
EP10 v1
Vendor TP-Link Systems Inc.
Product EP10 v1
Platforms Unknown
Default status unaffected
EP10 v1 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom 1.1.1 Build 250908 Rel.112508 Unavailable None listed
EP40 v1
Vendor TP-Link Systems Inc.
Product EP40 v1
Platforms Unknown
Default status unaffected
EP40 v1 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom 1.1.0 Build 250225 Rel.171723 Unavailable None listed
HS200 v5
Vendor TP-Link Systems Inc.
Product HS200 v5
Platforms Unknown
Default status unaffected
HS200 v5 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom 1.1.2 Build 241220 Rel.165559 Unavailable None listed
KP401 v1
Vendor TP-Link Systems Inc.
Product KP401 v1
Platforms Unknown
Default status unaffected
KP401 v1 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom 1.1.2 Build 241223 Rel.094434 Unavailable None listed
KS230 KIT v2
Vendor TP-Link Systems Inc.
Product KS230 KIT v2
Platforms Unknown
Default status unaffected
KS230 KIT v2 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom 1.1.4 Build 241223 Rel.105830 Unavailable None listed
KP405 v1
Vendor TP-Link Systems Inc.
Product KP405 v1
Platforms Unknown
Default status unaffected
KP405 v1 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom 1.1.0 Build 250225 Rel.174632 Unavailable None listed
HS220 v3
Vendor TP-Link Systems Inc.
Product HS220 v3
Platforms Unknown
Default status unaffected
HS220 v3 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom 1.1.4 Build 241220 Rel.171050 Unavailable None listed
KP115 v1
Vendor TP-Link Systems Inc.
Product KP115 v1
Platforms Unknown
Default status unaffected
KP115 v1 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom 1.1.1 Build 250908 Rel.112945 Unavailable None listed
HS210 v3
Vendor TP-Link Systems Inc.
Product HS210 v3
Platforms Unknown
Default status unaffected
HS210 v3 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom 1.1.0 Build 250225 Rel.163425 Unavailable None listed
HS300 v2
Vendor TP-Link Systems Inc.
Product HS300 v2
Platforms Unknown
Default status unaffected
HS300 v2 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom 1.1.2 Build 241220 Rel.171333 Unavailable None listed
KP200 v3
Vendor TP-Link Systems Inc.
Product KP200 v3
Platforms Unknown
Default status unaffected
KP200 v3 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom 1.1.0 Build 250225 Rel.171724 Unavailable None listed
KP303 v2
Vendor TP-Link Systems Inc.
Product KP303 v2
Platforms Unknown
Default status unaffected
KP303 v2 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom 1.1.2 Build 241220 Rel.173321 Unavailable None listed
KS200 v1
Vendor TP-Link Systems Inc.
Product KS200 v1
Platforms Unknown
Default status unaffected
KS200 v1 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom 1.1.2 Build 241223 Rel.103857 Unavailable None listed
EP40A v1
Vendor TP-Link Systems Inc.
Product EP40A v1
Platforms Unknown
Default status unaffected
EP40A v1 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom 1.1.1 Build 250908 Rel.112526 Unavailable None listed
KS220 v1
Vendor TP-Link Systems Inc.
Product KS220 v1
Platforms Unknown
Default status unaffected
KS220 v1 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom 1.1.3 Build 241223 Rel.105515 Unavailable None listed
KS200M v1
Vendor TP-Link Systems Inc.
Product KS200M v1
Platforms Unknown
Default status unaffected
KS200M v1 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom 1.1.4 Build 241223 Rel.104700 Unavailable None listed
ES20M v1
Vendor TP-Link Systems Inc.
Product ES20M v1
Platforms Unknown
Default status unaffected
ES20M v1 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom 1.1.6 Build 250522 Rel.210254 Unavailable None listed
KS220M v1
Vendor TP-Link Systems Inc.
Product KS220M v1
Platforms Unknown
Default status unaffected
KS220M v1 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom 1.1.6 Build 250522 Rel.210254 Unavailable None listed
KP400 v3
Vendor TP-Link Systems Inc.
Product KP400 v3
Platforms Unknown
Default status unaffected
KP400 v3 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom 1.1.0 Build 250225 Rel.171723 Unavailable None listed
KL125 v4
Vendor TP-Link Systems Inc.
Product KL125 v4
Platforms Unknown
Default status unaffected
KL125 v4 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom 1.1.1 Build 260710 Rel.082646 Unavailable None listed
KL135 v2
Vendor TP-Link Systems Inc.
Product KL135 v2
Platforms Unknown
Default status unaffected
KL135 v2 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom 1.1.1 Build 260710 Rel.082646 Unavailable None listed
KL110 v4
Vendor TP-Link Systems Inc.
Product KL110 v4
Platforms Unknown
Default status unaffected
KL110 v4 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom 1.1.1 Build 260710 Rel.082646 Unavailable None listed
KL420L5 v1
Vendor TP-Link Systems Inc.
Product KL420L5 v1
Platforms Unknown
Default status unaffected
KL420L5 v1 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom 1.4.2 Build 260605 Rel.035033 Unavailable None listed