—–BEGIN PGP SIGNED MESSAGE—–

Hash: SHA256

Multiple Vulnerabilities in TP-Link Products

Indian – Computer Emergency Response Team (https://www.cert-in.org.in)

Severity Rating: HIGH

Software Affected

TP-Link Kasa EC70 V4 firmware versions prior to 2.4.0 Build 20260520 rel. 4191

TP-Link Kasa EC71 V4 firmware versions prior to 2.4.0 Build 20260520 rel. 4191

TP-Link Kasa EC70 V4 firmware versions prior to 2.4.1 Build 20260621 rel. 76536

TP-Link Kasa EC71 V4 firmware versions prior to 2.4.1 Build 20260621 rel. 76536

Overview

Multiple vulnerabilities have been reported in TP-Link products, which could allow an attacker on the same local network to disclose sensitive information, intercept encrypted communications through a Man-in-the-Middle (MITM) attack, expose geolocation information, and compromise the confidentiality of the affected devices.

Target Audience:

All organizations and individuals using the affected TP-Link products.

Risk Assessment:

High risk of sensitive information disclosure, compromise of encrypted communications through Man-in-the-Middle (MITM) attacks, and exposure of geolocation information.

Impact Assessment:

Potential for disclosure of sensitive information, interception of encrypted communications, exposure of geolocation information, and compromise of the confidentiality of affected devices.

Description

TP-Link Kasa EC70 and EC71 are smart security cameras that provide remote monitoring and surveillance capabilities for residential and enterprise environments.

These vulnerabilities exist in TP-Link products due to the use of a hard-coded cryptographic private key within the firmware and exposure of sensitive geolocation information through the local discovery mechanism.

Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information, intercept encrypted communications through a Man-in-the-Middle (MITM) attack, expose geolocation information, and compromise the confidentiality of the affected devices.

Solution

Apply appropriate firmware updates as recommended by the vendor.

https://www.tp-link.com/us/support/faq/5192/

Vendor Information

TP-Link

https://www.tp-link.com/us/support/faq/5192/

References

 

https://www.tp-link.com/us/support/faq/5192/

CVE Name

CVE-2026-9770

CVE-2026-13230

– —

Thanks and Regards,

CERT-In

Incident Response Help Desk

e-mail: incident@cert-in.org.in

Phone: +91-11-22902657

Toll Free Number: 1800-11-4949

Toll Free Fax : 1800-11-6969

Web: http://www.cert-in.org.in

PGP Fingerprint: A768 083E 4475 5725 B81A A379 2156 C0C0 B620 D0B4

PGP Key information:

https://www.cert-in.org.in/s2cMainServlet?pageid=CONTACTUS

Postal address:

Indian Computer Emergency Response Team (CERT-In)

Ministry of Electronics and Information Technology

Government of India

Electronics Niketan

6, C.G.O. Complex

New Delhi-110 003

—–BEGIN PGP SIGNATURE—–

iQIzBAEBCAAdFiEE6r4Iam/Ey0c/KakL3jCgcSdcys8FAmpfifwACgkQ3jCgcSdc

ys9W+Q/9GhGGsG6rPz6G1ndLjC+k+e2sE11fm5I+0kBRoADGSOAr/orWlT/JbDny

b+H79qyFZrLGcUR30EZ+CsslJcs64LGqM9cL4G5Tj5FGOHGc/UksjEJs+8fUUICx

XxITHWWZ76+0LkQfkpCESY/zuQukl+dw5dsoTqUdOrjf6yXhu2MVVgQq9GVKJRMk

PzciYxiVZXWYq0SEK0i43bPrebnQ9ofJ6HMTwRDFb9+9MzU/NZWpnmHOI8aj6TXq

SJ7RQgMZzTQbPN6OMj7kTyW/or0326OEniN5H8iGZb1RglgRO0adcOHmTPkKHBKn

/l0VrG164/8/cWK76A7on20D9zd/zqQrSI88J0oroIndW9u/HXIyVk2XL4AIK5tO

EFYrb9UuMnztJGPuZtzJoJgu+UjlQ1BatfcOzhPkrfNbNt8Bh4Eyw5xImlJRGx+t

nN+eIzqVNSgT6+1cY3n+PudEtU6IKqyFgPzu50RO/iHsTqjhtf/n7Kz75L2XP3Il

pKBJKRLV2c/Mj6oQP+AMog0ozGEA+5jdeDfKPmS/lQiXzRyBw0XKOZD8ALETXnc9

2atSpoOv7n9JyR3l+1eRmLnLw0sNwxAQgVGrwvIjgb4KQUV4jhD/cTCFZ2HQNg9/

4GF0SLUsyDHkbcLBNnM2C70vWHXMACZ7sednFwpO8jo5dF+Y9kI=

=aVqE

—–END PGP SIGNATURE—–