Tp Link Tapo App
Approved changes feed: RSS · Atom
cpe:2.3:a:tp-link_systems_inc.:tp-link_tapo_app:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Tp Link Systems Inc. (48bb0273-54d9-5a12-8b5a-2521b7aba122) |
|---|---|
| Product | Tp Link Tapo App (76642913-1b63-59e9-9252-91c9c3321805) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-4975 |
vulnerable | 2026-06-08 07:29:17.612562 |
Tapo privilege escalation on shared devices using notifications
When a notification relating to low battery appears for a user with whom the device has been shared, tapping the notification grants full access to the power settings of that device.
Published: 2025-05-22T21:17:52.691Z
Updated: 2025-10-08T09:37:20.297Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14553 |
vulnerable | 2026-06-08 07:06:34.679094 |
Password Hash Leak Could Lead to Unauthorized Access on Tapo App via Local Network
Exposure of password hashes through an unauthenticated API response in TP-Link Tapo app on iOS and Android for Tapo cameras, allowing attackers to brute force the password in the local network. Issue can be mitigated through mobile application updates. Device firmware remains unchanged.
Published: 2025-12-16T18:38:08.805Z
Updated: 2026-01-09T00:48:59.820Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.