← CVE Intelligence

CVE-2025-4975

Tapo privilege escalation on shared devices using notifications PUBLISHED

Description (CNA)

When a notification relating to low battery appears for a user with whom the device has been shared, tapping the notification grants full access to the power settings of that device.

Affected (CNA)

Vendor / productVersions
TP-Link Systems Inc. / TP-Link Tapo appaffected 0 before 3.10.513

CWE

CWE-863

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.