CVE-2025-8627

The TP-Link KP303 Smartplug can be issued unauthenticated protocol commands that may cause unintended power-off condition and potential information leak. This issue affects TP-Link KP303 (US) Smartplug: before 1.1.0.

Score

CVSS 3.1 8.8 High

Status

Analyzed - f23511db-6c3e-4e32-a477-6aa17d310630

Published

2025-08-25

Last modified

2025-08-26

Weaknesses

CWE-306

Affected products

• Kp303 Firmware (Tp-link)
• Tp-link Kp303 Us Smartplug (Tp-link Systems Inc.)

References

• https://www.tp-link.com/us/support/faq/4619/