TP-Link Tapo H200 V1 IoT Smart Hub Wi-Fi Credentials Information Disclosure Vulnerability
Vulnerability
An information disclosure vulnerability exists in the TP-Link Tapo H200 V1 IoT Smart Hub, specifically in firmware versions through 1.4.0. The issue arises from Wi-Fi credentials being stored in plain text within the device's firmware. An attacker with physical access could exploit this vulnerability by extracting the firmware and analyzing the binary data to retrieve the unencrypted Wi-Fi credentials.
Impact
Exploitation of this vulnerability could lead to unauthorized access to the user's Wi-Fi network by exposing the stored Wi-Fi credentials.
Remediation
Users are advised to upgrade the TP-Link Tapo H200 IoT Smart Hub to firmware version 1.5.0 or higher.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.