Severity
Medium
Analysis Summary
CVE-2024-10523
TP-Link IoT Smart Hub could allow a physical attacker to obtain sensitive information, caused by the storage of Wi-Fi credentials in plain text within the device firmware. By extracting the firmware and analyzing the binary data, an attacker could exploit this vulnerability to the Wi-Fi credentials stored on the vulnerable device.
Impact
- Information Disclosure
Indicators of Compromise
CVE
- CVE-2024-10523
Affected Vendors
TP-Link
Affected Products
- TP-Link Tapo H100 IoT Smart Hub 1.5.21
Remediation
Refer to TP-Link Website for patch, upgrade, or suggested workaround information.