Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-8627

Unauthenticated Protocol Commands on TP-Link KP303

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TPLink

Description

The TP-Link KP303 Smartplug can be issued unauthenticated protocol commands that may cause unintended power-off condition and potential information leak. This issue affects TP-Link KP303 (US) Smartplug: before 1.1.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TP-Link Systems Inc. TP-Link KP303 (US) Smartplug

Default version status: unaffected

  • 0 to < 1.1.0affected

References