CVE-2023-38906
First published: Mon Aug 21 2023(Updated: )
An issue in TPLink Smart Bulb Tapo series L530 1.1.9, L510E 1.0.8, L630 1.0.3, P100 1.4.9, Smart Camera Tapo series C200 1.1.18, and Tapo Application 2.8.14 allows a remote attacker to obtain sensitive information via the authentication code for the UDP message.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| TP-Link Tapo | =2.8.14 | |
| TP-Link Tapo L530E | =1.0.0 | |
| Tp-link Tapo L530e Firmware | ||
| All of | ||
| Any of | ||
| TP-Link Tapo | =2.8.14 | |
| TP-Link Tapo L530E | =1.0.0 | |
| Tp-link Tapo L530e Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for the issue in TPLink Smart bulb Tapo series L530 v.1.0.0 and Tapo Application v.2.8.14?
The vulnerability ID for this issue is CVE-2023-38906.
What is the severity level of CVE-2023-38906?
The severity level of CVE-2023-38906 is medium.
How does CVE-2023-38906 allow an attacker to obtain sensitive information?
CVE-2023-38906 allows a remote attacker to obtain sensitive information via the authentication code for the UDP message.
Which versions of TPLink Tapo Application are affected by CVE-2023-38906?
TPLink Tapo Application v.2.8.14 is affected by CVE-2023-38906.
How can I fix CVE-2023-38906 in TPLink Smart bulb Tapo series L530 v.1.0.0 and Tapo Application v.2.8.14?
To fix CVE-2023-38906, it is recommended to update Tapo Application to a version that addresses the vulnerability.
- agent/author
- agent/type
- agent/severity
- agent/first-publish-date
- agent/event
- agent/softwarecombine
- agent/references
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/tp-link
- canonical/tp-link tapo
- version/tp-link tapo/2.8.14
- canonical/tp-link tapo l530e
- version/tp-link tapo l530e/1.0.0
- canonical/tp-link tapo l530e firmware