Approved changes feed: RSS · Atom

cpe:2.3:h:tp-link:tapo_h100:1.0:*:*:*:*:*:*:*

part: h version: 1.0 update: *

VendorTp Link (0b2e1553-ac8b-5981-a60b-ca6c27ee3a6e)
ProductTapo H100 (d44324d8-cfcc-563a-9f26-06ac99ecea1d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-15557 not_vulnerable 2026-06-08 07:06:36.456539 Improper Certificate Validation in TP-Link Tapo H100 and P100 Allows Man-in-the-Middle Attack
An Improper Certificate Validation vulnerability in TP-Link Tapo H100 v1 and Tapo P100 v1 allows an on-path attacker on the same network segment to intercept and modify encrypted device-cloud communications.  This may compromise the confidentiality and integrity of device-to-cloud communication, enabling manipulation of device data or operations.
Published: 2026-02-05T17:45:28.407Z
Updated: 2026-02-05T20:33:53.106Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10523 not_vulnerable 2026-06-08 06:23:46.859411 Information Disclosure Vulnerability in TP-Link IoT Smart Hub
This vulnerability exists in TP-Link IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmware and analyzing the binary data to obtain the Wi-Fi credentials stored on the vulnerable device.
Published: 2024-11-04T12:00:05.802Z
Updated: 2024-11-04T15:06:40.613Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.