CVE Catalog
CVE-2023-38906
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.46%
36th percentile - higher than 36% of all known CVEs
Summary
An issue in TPLink Smart Bulb Tapo series and Tapo Application allows a remote attacker to obtain sensitive information via the authentication code for the UDP message.
Risk Assessment
An attacker could gain access to confidential data, potentially leading to further attacks on the organization's infrastructure.
Recommendation
It is recommended to update devices and applications to the latest versions to minimize the risk associated with this vulnerability.
Original NVD description (English source)
An issue in TPLink Smart Bulb Tapo series L530 1.1.9, L510E 1.0.8, L630 1.0.3, P100 1.4.9, Smart Camera Tapo series C200 1.1.18, and Tapo Application 2.8.14 allows a remote attacker to obtain sensitive information via the authentication code for the UDP message.