CVE-2024-35495

—

CVSS 3.1

4.3 medium

EPSS

<1%p10

Published

Sep 30, 2024 (Sep 30, 2024)

Modified

Jun 17, 2026

Description

An Information Disclosure vulnerability in the Telemetry component in TP-Link Kasa KP125M V1.0.0 and Tapo P125M 1.0.0 Build 220930 Rel.143947 allows attackers to observe device state via observing network traffic.

Weakness: CWE-319
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.