CVE-2023-38906

6.5 mediumEPSS 0.5%

Medium (6.5) in tp-link. EPSS 0.5% chance of exploitation in the next 30 days.

An issue in TPLink Smart Bulb Tapo series L530 1.1.9, L510E 1.0.8, L630 1.0.3, P100 1.4.9, Smart Camera Tapo series C200 1.1.18, and Tapo Application 2.8.14 allows a remote attacker to obtain sensitive information via the authentication code for the UDP message.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-31)
Published: 2023-08-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

tp-link:tapo
tp-link:tapo_l530e_firmware

References

https://arxiv.org/abs/2308.09019
https://www.dmi.unict.it/giamp/smartbulbscanbehackedtohackintoyourhousehold/
https://www.scitepress.org/Papers/2023/120929/120929.pdf
https://www.scitepress.org/PublicationsDetail.aspx?ID=X/auBv7JrSo=&t=1
https://arxiv.org/abs/2308.09019

Check your stack JSON