CVE-2025-10991: Root Access via UART
The attacker may obtain root access by connecting to the UART port and this vulnerability requires the attacker to have the physical access to the device.
This issue affects Tapo D230S1 V1.20: before 1.2.2 Build 20250907.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10991?
CVE-2025-10991 is considered a critical vulnerability as it allows an attacker with physical access to gain root access.
How do I fix CVE-2025-10991?
To remediate CVE-2025-10991, users should update the Tapo D230S1 device to version 1.2.2 Build 20250907 or later.
What devices are affected by CVE-2025-10991?
CVE-2025-10991 specifically affects the Tapo D230S1 model version before 1.2.2 Build 20250907.
Can the attacker exploit CVE-2025-10991 remotely?
No, CVE-2025-10991 requires physical access to the device to exploit the vulnerability.
What are the potential risks of CVE-2025-10991?
Exploiting CVE-2025-10991 could lead to unauthorized control and manipulation of the device, jeopardizing the user's security.