CVE-2023-34829

Incorrect access control in TP-Link Tapo before v3.1.315 allows attackers to access user credentials in plaintext.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2023-12-28

Last modified

2025-04-17

Weaknesses

CWE-319

Affected products

• Tapo (Tp-link)

References

• https://github.com/SecureScripts/TP-Link_Tapo_Hack