Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An Improper Certificate Validation vulnerability in TP-Link Tapo H100 v1 and Tapo P100 v1 allows an on-path attacker on the same network segment to intercept and modify encrypted device-cloud communications. This may compromise the confidentiality and integrity of device-to-cloud communication, enabling manipulation of device data or operations.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 4 products
CVE-2025-15557 An Improper Certificate Validation vulnerability in TP-Link Tapo H100 v1 and Tapo P100 v1 allows an on-path attacker on the same network segment to intercept and modi… https://www.cve.org/CVERecord?id=CVE-2025-15557
Post summary
The post announces an improper certificate validation flaw in TP‑Link Tapo H100 and P100 devices that could let an on‑path attacker intercept and modify traffic within the same network segment.
⚠️ Vulnerabilidad en productos TP-Link ❗ CVE-2025-15557 ➡️ Más info: https://www.cert.gov.py/vulnerabilidad-en-productos-tp-link-3/ https://t.co/nPEfjM3wmw
Post summary
The post announces a vulnerability (CVE-2025-15557) in TP‑Link products and provides links for additional information.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tp-link | tapo_h100 | 1.0 | - | - |
| OS | tp-link | tapo_h100_firmware | - | - | - |
| HW | tp-link | tapo_p100 | 1.0 | - | - |
| OS | tp-link | tapo_p100_firmware | - | - | - |