We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
This vulnerability exists in TP-Link IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmware and analyzing the binary data to obtain the Wi-Fi credentials stored on the vulnerable device.
Reserved 2024-10-30 | Published 2024-11-04 | Updated 2024-11-04 | Assigner CERT-InCWE-312: Cleartext Storage of Sensitive Information
This vulnerability is reported by Shravan Singh from Mumbai, India
www.cert-in.org.in/...eid=PUBVLNOTES01&VLCODE=CIVN-2024-0331
Support options