IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key
7.7High

CVE-2025-9293Insufficient Certificate Validation in Multiple Mobile Applications Allows Man in the Middle Interception

TP-Link Systems Inc. Tapo App; TP-Link Systems Inc. Kasa App; TP Link Systems Inc. Omada App; TP-Link Systems Inc. Omada Guard Published: (9 months ago)

Description

A vulnerability in the certificate validation logic may allow applications to accept untrusted or improperly validated server identities during TLS communication. An attacker in a privileged network position may be able to intercept or modify traffic if they can position themselves within the communication channel. Successful exploitation may compromise confidentiality, integrity, and availability of application data.

Weakness (CWE): CWE-295

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
tp-link aginet < 2.13.6
TP-Link Systems Inc. Aginet App < 2.13.6
tp-link deco < 3.9.163
TP-Link Systems Inc. Deco App < 3.9.163
tp-link festa < 1.7.1
TP-Link Systems Inc. Festa App < 1.7.1
tp-link kasa < 3.4.350
TP-Link Systems Inc. Kasa App < 3.4.350
TP-Link Systems Inc. KidShield < 1.1.21
tp-link omada < 4.25.25
TP Link Systems Inc. Omada App < 4.25.25
TP-Link Systems Inc. Omada Guard < 1.1.28
tp-link tapo < 3.14.111
TP-Link Systems Inc. Tapo App < 3.14.111
tp-link tether < 4.12.27
TP-Link Systems Inc. Tether App < 4.12.27
tp-link tp-partner < 2.0.1
TP-Link Systems Inc. TP-Partner App < 2.0.1
tp-link tpcamera < 3.2.17
TP-Link Systems Inc. tpCamera App < 3.2.17
tp-link vigi < 2.7.70
TP-Link Systems Inc. VIGI App < 2.7.70
TP-Link Systems Inc. Wi-Fi Navi < 1.5.5
TP-Link Systems Inc. WiFi Toolkit < 1.4.28

References and patches

CPE matches (NVD) (14)
  • cpe:2.3:a:tp-link:aginet:*:*:*:*:*:*:*:* < 2.13.6
  • cpe:2.3:a:tp-link:deco:*:*:*:*:*:*:*:* < 3.9.163
  • cpe:2.3:a:tp-link:festa:*:*:*:*:*:*:*:* < 1.7.1
  • cpe:2.3:a:tp-link:kasa:*:*:*:*:*:*:*:* < 3.4.350
  • cpe:2.3:a:tp-link:kidshield:*:*:*:*:*:*:*:* < 1.1.21
  • cpe:2.3:a:tp-link:omada:*:*:*:*:*:*:*:* < 4.25.25
  • cpe:2.3:a:tp-link:omada_guard:*:*:*:*:*:*:*:* < 1.1.28
  • cpe:2.3:a:tp-link:tapo:*:*:*:*:*:*:*:* < 3.14.111
  • cpe:2.3:a:tp-link:tether:*:*:*:*:*:*:*:* < 4.12.27
  • cpe:2.3:a:tp-link:tp-partner:*:*:*:*:*:*:*:* < 2.0.1
  • cpe:2.3:a:tp-link:tpcamera:*:*:*:*:*:*:*:* < 3.2.17
  • cpe:2.3:a:tp-link:vigi:*:*:*:*:*:*:*:* < 2.7.70
  • cpe:2.3:a:tp-link:wi-fi_navi:*:*:*:*:*:*:*:* < 1.5.5
  • cpe:2.3:a:tp-link:wifi_toolkit:*:*:*:*:*:*:*:* < 1.4.28