Tp-link Tapo H100 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Tp-link Tapo H100 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2025-15557 — CVSS 8.8 (high): An Improper Certificate Validation vulnerability in TP-Link Tapo H100 v1 and Tapo P100 v1 allows an on-path attacker on the same network…
• CVE-2024-10523 — CVSS 4.6 (medium): This vulnerability exists in TP-Link IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device firmware. An…