← Database

CVE-2024-46549

HIGH CVSS: 7.6 Published: 2024-09-30 Modified: 2026-06-17

Description

An issue in the TP-Link MQTT Broker and API gateway of TP-Link Kasa KP125M v1.0.3 allows attackers to establish connections by impersonating devices owned by other users.

Affected Platforms

Unknown

Weakness Type

CWE-269

References