Approved changes feed: RSS · Atom
cpe:2.3:a:tp-link_systems_inc.:hs300_v2:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Tp Link Systems Inc. (48bb0273-54d9-5a12-8b5a-2521b7aba122) |
|---|---|
| Product | Hs300 V2 (8bb59a76-699c-516d-be0a-970d4acbe767) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-108473 |
vulnerable | 2026-11-03 10:18:01.090514 |
Improper Authentication and Credential Exposure in Multiple TP-Link Kasa Devices
Multiple
Kasa devices contain an improper authentication vulnerability in the local
device-management protocol. An unauthenticated adjacent attacker may send
management instructions to an affected device without adequate authentication
or authorization, allowing modification of the device state or management
settings. Under certain usage conditions involving interaction between the
user, mobile application, and device-cloud service, insufficient protection of
account-related communications may also expose account information.
Successful
exploitation may allow an unauthenticated adjacent-network attacker to perform
unauthorized device-management actions and disrupt legitimate user control.
Under certain conditions, account-related information may also be exposed,
potentially leading to compromise of the associated cloud account.
Published: 2026-10-14T00:06:08.695Z
Updated: 2026-10-14T18:06:29.150Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.