TP-Link Tapo D230S1 Root Access Vulnerability via UART

A vulnerability allowing root access has been identified in the TP-Link Tapo D230S1 model, specifically in version 1.20 prior to 1.2.2 Build 20250907. This issue arises from physical access to the device, where an attacker can connect to the UART port to gain root privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized root access, allowing an attacker to control the device with full administrative rights.

Remediation

Users are advised to update to the latest firmware version 1.2.2 Build 20250907. Instructions for updating can be found on the TP-Link support website.