7.7Alta
Insufficient Certificate Validation in Multiple Mobile Applications Allows Man in the Middle Interception
TP-Link Systems Inc. Tapo App; TP-Link Systems Inc. Kasa App; TP Link Systems Inc. Omada App; TP-Link Systems Inc. Omada Guard
A vulnerability in the certificate validation logic may allow applications to accept untrusted or improperly validated server identities during TLS communication. An attacker in a privileged network position may be able to intercept or modify traffic if they …