p PatchFirst

CVE-2026-108473

CVE-2026-108473 · Improper Authentication and Credential Exposure in Multiple TP-Link Kasa Devices

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

Multiple Kasa devices contain an improper authentication vulnerability in the local device-management protocol. An unauthenticated adjacent attacker may send management instructions to an affected device without adequate authentication or authorization, allowing modification of the device state or management settings. Under certain usage conditions involving interaction between the user, mobile application, and device-cloud service, insufficient protection of account-related communications may also expose account information. Successful exploitation may allow an unauthenticated adjacent-network attacker to perform unauthorized device-management actions and disrupt legitimate user control. Under certain conditions, account-related information may also be exposed, potentially leading to compromise of the associated cloud account.

CVSS 8.7 · Alta · EPSS 0,3% · Corrección disponible

Publicación
Actualización

Productos y versiones afectados

  • hs103 v5

    Versiones
    • ≥ 0, < 1.1.3 Build 250908 Rel.112508: Afectada (custom)

    Actualiza a 1.1.3 Build 250908 Rel.112508

  • ep10 v1

    Versiones
    • ≥ 0, < 1.1.1 Build 250908 Rel.112508: Afectada (custom)

    Actualiza a 1.1.1 Build 250908 Rel.112508

  • ep40 v1

    Versiones
    • ≥ 0, < 1.1.0 Build 250225 Rel.171723: Afectada (custom)

    Actualiza a 1.1.0 Build 250225 Rel.171723

  • hs200 v5

    Versiones
    • ≥ 0, < 1.1.2 Build 241220 Rel.165559: Afectada (custom)

    Actualiza a 1.1.2 Build 241220 Rel.165559

  • kp401 v1

    Versiones
    • ≥ 0, < 1.1.2 Build 241223 Rel.094434: Afectada (custom)

    Actualiza a 1.1.2 Build 241223 Rel.094434

  • ks230 kit v2

    Versiones
    • ≥ 0, < 1.1.4 Build 241223 Rel.105830: Afectada (custom)

    Actualiza a 1.1.4 Build 241223 Rel.105830

  • kp405 v1

    Versiones
    • ≥ 0, < 1.1.0 Build 250225 Rel.174632: Afectada (custom)

    Actualiza a 1.1.0 Build 250225 Rel.174632

  • hs220 v3

    Versiones
    • ≥ 0, < 1.1.4 Build 241220 Rel.171050: Afectada (custom)

    Actualiza a 1.1.4 Build 241220 Rel.171050

  • kp115 v1

    Versiones
    • ≥ 0, < 1.1.1 Build 250908 Rel.112945: Afectada (custom)

    Actualiza a 1.1.1 Build 250908 Rel.112945

  • hs210 v3

    Versiones
    • ≥ 0, < 1.1.0 Build 250225 Rel.163425: Afectada (custom)

    Actualiza a 1.1.0 Build 250225 Rel.163425

  • hs300 v2

    Versiones
    • ≥ 0, < 1.1.2 Build 241220 Rel.171333: Afectada (custom)

    Actualiza a 1.1.2 Build 241220 Rel.171333

  • kp200 v3

    Versiones
    • ≥ 0, < 1.1.0 Build 250225 Rel.171724: Afectada (custom)

    Actualiza a 1.1.0 Build 250225 Rel.171724

  • kp303 v2

    Versiones
    • ≥ 0, < 1.1.2 Build 241220 Rel.173321: Afectada (custom)

    Actualiza a 1.1.2 Build 241220 Rel.173321

  • ks200 v1

    Versiones
    • ≥ 0, < 1.1.2 Build 241223 Rel.103857: Afectada (custom)

    Actualiza a 1.1.2 Build 241223 Rel.103857

  • ep40a v1

    Versiones
    • ≥ 0, < 1.1.1 Build 250908 Rel.112526: Afectada (custom)

    Actualiza a 1.1.1 Build 250908 Rel.112526

  • ks220 v1

    Versiones
    • ≥ 0, < 1.1.3 Build 241223 Rel.105515: Afectada (custom)

    Actualiza a 1.1.3 Build 241223 Rel.105515

  • ks200m v1

    Versiones
    • ≥ 0, < 1.1.4 Build 241223 Rel.104700: Afectada (custom)

    Actualiza a 1.1.4 Build 241223 Rel.104700

  • es20m v1

    Versiones
    • ≥ 0, < 1.1.6 Build 250522 Rel.210254: Afectada (custom)

    Actualiza a 1.1.6 Build 250522 Rel.210254

  • ks220m v1

    Versiones
    • ≥ 0, < 1.1.6 Build 250522 Rel.210254: Afectada (custom)

    Actualiza a 1.1.6 Build 250522 Rel.210254

  • kp400 v3

    Versiones
    • ≥ 0, < 1.1.0 Build 250225 Rel.171723: Afectada (custom)

    Actualiza a 1.1.0 Build 250225 Rel.171723

  • kl125 v4

    Versiones
    • ≥ 0, < 1.1.1 Build 260710 Rel.082646: Afectada (custom)

    Actualiza a 1.1.1 Build 260710 Rel.082646

  • kl135 v2

    Versiones
    • ≥ 0, < 1.1.1 Build 260710 Rel.082646: Afectada (custom)

    Actualiza a 1.1.1 Build 260710 Rel.082646

  • kl110 v4

    Versiones
    • ≥ 0, < 1.1.1 Build 260710 Rel.082646: Afectada (custom)

    Actualiza a 1.1.1 Build 260710 Rel.082646

  • kl420l5 v1

    Versiones
    • ≥ 0, < 1.4.2 Build 260605 Rel.035033: Afectada (custom)

    Actualiza a 1.4.2 Build 260605 Rel.035033

Fuentes originales

Comprueba tu servidor →