IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
7.7Hoch

CVE-2025-9293Insufficient Certificate Validation in Multiple Mobile Applications Allows Man in the Middle Interception

TP-Link Systems Inc. Tapo App; TP-Link Systems Inc. Kasa App; TP Link Systems Inc. Omada App; TP-Link Systems Inc. Omada Guard Veröffentlicht: (vor 9 Monaten)

Beschreibung

A vulnerability in the certificate validation logic may allow applications to accept untrusted or improperly validated server identities during TLS communication. An attacker in a privileged network position may be able to intercept or modify traffic if they can position themselves within the communication channel. Successful exploitation may compromise confidentiality, integrity, and availability of application data.

Schwachstellentyp (CWE): CWE-295

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
tp-link aginet < 2.13.6
TP-Link Systems Inc. Aginet App < 2.13.6
tp-link deco < 3.9.163
TP-Link Systems Inc. Deco App < 3.9.163
tp-link festa < 1.7.1
TP-Link Systems Inc. Festa App < 1.7.1
tp-link kasa < 3.4.350
TP-Link Systems Inc. Kasa App < 3.4.350
TP-Link Systems Inc. KidShield < 1.1.21
tp-link omada < 4.25.25
TP Link Systems Inc. Omada App < 4.25.25
TP-Link Systems Inc. Omada Guard < 1.1.28
tp-link tapo < 3.14.111
TP-Link Systems Inc. Tapo App < 3.14.111
tp-link tether < 4.12.27
TP-Link Systems Inc. Tether App < 4.12.27
tp-link tp-partner < 2.0.1
TP-Link Systems Inc. TP-Partner App < 2.0.1
tp-link tpcamera < 3.2.17
TP-Link Systems Inc. tpCamera App < 3.2.17
tp-link vigi < 2.7.70
TP-Link Systems Inc. VIGI App < 2.7.70
TP-Link Systems Inc. Wi-Fi Navi < 1.5.5
TP-Link Systems Inc. WiFi Toolkit < 1.4.28

Referenzen und Patches

CPE-Treffer (NVD) (14)
  • cpe:2.3:a:tp-link:aginet:*:*:*:*:*:*:*:* < 2.13.6
  • cpe:2.3:a:tp-link:deco:*:*:*:*:*:*:*:* < 3.9.163
  • cpe:2.3:a:tp-link:festa:*:*:*:*:*:*:*:* < 1.7.1
  • cpe:2.3:a:tp-link:kasa:*:*:*:*:*:*:*:* < 3.4.350
  • cpe:2.3:a:tp-link:kidshield:*:*:*:*:*:*:*:* < 1.1.21
  • cpe:2.3:a:tp-link:omada:*:*:*:*:*:*:*:* < 4.25.25
  • cpe:2.3:a:tp-link:omada_guard:*:*:*:*:*:*:*:* < 1.1.28
  • cpe:2.3:a:tp-link:tapo:*:*:*:*:*:*:*:* < 3.14.111
  • cpe:2.3:a:tp-link:tether:*:*:*:*:*:*:*:* < 4.12.27
  • cpe:2.3:a:tp-link:tp-partner:*:*:*:*:*:*:*:* < 2.0.1
  • cpe:2.3:a:tp-link:tpcamera:*:*:*:*:*:*:*:* < 3.2.17
  • cpe:2.3:a:tp-link:vigi:*:*:*:*:*:*:*:* < 2.7.70
  • cpe:2.3:a:tp-link:wi-fi_navi:*:*:*:*:*:*:*:* < 1.5.5
  • cpe:2.3:a:tp-link:wifi_toolkit:*:*:*:*:*:*:*:* < 1.4.28