CVE Intelligence

TP-Link Systems Inc. Tapo P100 Firmware vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting TP-Link Systems Inc. Tapo P100 Firmware: 1 record(s), with affected versions and fixes.
cpe:2.3:o:tp-link:tapo_p100_firmware

CVE-2025-15557 High · 8.8 CWE-295 Feb 5, 2026
Improper Certificate Validation in TP-Link Tapo H100 and P100 Allows Man-in-the-Middle Attack
An Improper Certificate Validation vulnerability in TP-Link Tapo H100 v1 and Tapo P100 v1 allows an on-path attacker on the same network segment to intercept and modify encrypted device-cloud communications.  This may compromise the confidentiality and integrity of device-to-cloud communication, enabling manipulation of device data or operations.