Insufficient Cryptographic Protections in Local Device Communication Protocol on Multiple TP-Link Kasa Smart Home Devices
Multiple
TP-Link Kasa smart home devices contain insufficient cryptographic protections
in the local device communication protocol. An adjacent network attacker may
intercept, replay or forge locally exchanged control messages, potentially
resulting in unauthorized device control.
Successful
exploitation could allow an attacker to manipulate the operational state of an
affected device, resulting in unauthorized state changes, disruption of normal
device functionality or a denial-of-service condition.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
HS103P3 / HS103P4 v5
Vendor
TP-Link Systems Inc.
Product
HS103P3 / HS103P4 v5
Platforms
Unknown
Default status
unaffected
HS103P3 / HS103P4 v5 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
1.1.3 Build 250908 Rel.112508
Unavailable
None listed
EP10
Vendor
TP-Link Systems Inc.
Product
EP10
Platforms
Unknown
Default status
unaffected
EP10 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
1.1.1 Build 250908 Rel.112508
Unavailable
None listed
EP25 V2
Vendor
TP-Link Systems Inc.
Product
EP25 V2
Platforms
Unknown
Default status
unaffected
EP25 V2 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
1.0.3 Build 240529 Rel.145252
Unavailable
None listed
HS300 V2
Vendor
TP-Link Systems Inc.
Product
HS300 V2
Platforms
Unknown
Default status
unaffected
HS300 V2 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
1.1.2 Build 241220 Rel.171333
Unavailable
None listed
KP303 V2
Vendor
TP-Link Systems Inc.
Product
KP303 V2
Platforms
Unknown
Default status
unaffected
KP303 V2 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
1.1.2 Build 241220 Rel.173321
Unavailable
None listed
EP40A
Vendor
TP-Link Systems Inc.
Product
EP40A
Platforms
Unknown
Default status
unaffected
EP40A · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
1.1.1 Build 250908 Rel.112526
Unavailable
None listed
KP125MP2 / KP125MP4
Vendor
TP-Link Systems Inc.
Product
KP125MP2 / KP125MP4
Platforms
Unknown
Default status
unaffected
KP125MP2 / KP125MP4 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
1.2.5 Build 241213 Rel.172504
Unavailable
None listed
KP115
Vendor
TP-Link Systems Inc.
Product
KP115
Platforms
Unknown
Default status
unaffected
KP115 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
1.1.1 Build 250908 Rel.112945
Unavailable
None listed
KS225
Vendor
TP-Link Systems Inc.
Product
KS225
Platforms
Unknown
Default status
unaffected
KS225 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
1.1.1 Build 240626 Rel.175125
Unavailable
None listed
EP40M
Vendor
TP-Link Systems Inc.
Product
EP40M
Platforms
Unknown
Default status
unaffected
EP40M · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
1.1.0 Build 240415 Rel.171219
Unavailable
None listed
KS205
Vendor
TP-Link Systems Inc.
Product
KS205
Platforms
Unknown
Default status
unaffected
KS205 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
1.1.1 Build 240724 Rel.105920
Unavailable
None listed
KS240
Vendor
TP-Link Systems Inc.
Product
KS240
Platforms
Unknown
Default status
unaffected
KS240 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
1.0.6 Build 240122 Rel.160100
Unavailable
None listed
ES20M
Vendor
TP-Link Systems Inc.
Product
ES20M
Platforms
Unknown
Default status
unaffected
ES20M · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
1.1.6 Build 250522 Rel.210254
Unavailable
None listed
KS220M
Vendor
TP-Link Systems Inc.
Product
KS220M
Platforms
Unknown
Default status
unaffected
KS220M · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
1.1.6 Build 250522 Rel.210254
Unavailable
None listed
KP200 V3
Vendor
TP-Link Systems Inc.
Product
KP200 V3
Platforms
Unknown
Default status
unaffected
KP200 V3 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
1.1.0 Build 250225 Rel.171724
Unavailable
None listed
HS200 V5.26
Vendor
TP-Link Systems Inc.
Product
HS200 V5.26
Platforms
Unknown
Default status
unaffected
HS200 V5.26 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
1.0.3 Build 240723 Rel.192622
Unavailable
None listed
HS220-LA(US) 6.6 / HS220-BL(US) 6.6
Vendor
TP-Link Systems Inc.
Product
HS220-LA(US) 6.6 / HS220-BL(US) 6.6
Platforms
Unknown
Default status
unaffected
HS220-LA(US) 6.6 / HS220-BL(US) 6.6 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
1.0.3 Build 240723 Rel.192630
Unavailable
None listed
HS220 V3.26
Vendor
TP-Link Systems Inc.
Product
HS220 V3.26
Platforms
Unknown
Default status
unaffected
HS220 V3.26 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
1.1.1 Build 240802 Rel.094131
Unavailable
None listed
HS220-LA(US) 4.6 / HS220-BL(US) 4.6
Vendor
TP-Link Systems Inc.
Product
HS220-LA(US) 4.6 / HS220-BL(US) 4.6
Platforms
Unknown
Default status
unaffected
HS220-LA(US) 4.6 / HS220-BL(US) 4.6 · Scoped product and version facts