CVE-2024-46549

HIGH EPSS 26.0%
Published Sep 30, 20241y ago · Modified Jun 17, 20262w ago
7.6 CVSS 3.1
High
Find Similar
Published Sep 30, 2024 1y ago
Last Modified Jun 17, 2026 2w ago

Description

An issue in the TP-Link MQTT Broker and API gateway of TP-Link Kasa KP125M v1.0.3 allows attackers to establish connections by impersonating devices owned by other users.

CVSS Details

Base Score
7.6
Exploitability
2.1
Impact
5.5
Vector string
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L
Attack Vector Adjacent
Attack Complexity Low
Privileges Required None
User Interaction Required
Scope Unchanged
Confidentiality High
Integrity High
Availability Low

Threat Intelligence

EPSS Exploit Probability
26.0% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-269 Improper Privilege Management Authorization

References 1

  • github.com https://github.com/Chapoly1305/tp-link-cve/blob/main/CVE-2024-46549.md

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.