CVE-2025-8627 — Unauthenticated Protocol Commands on TP-Link KP303

CVE-2025-8627

Unauthenticated Protocol Commands on TP-Link KP303 PUBLISHED

Description (CNA)

The TP-Link KP303 Smartplug can be issued unauthenticated protocol commands that may cause unintended power-off condition and potential information leak. This issue affects TP-Link KP303 (US) Smartplug: before 1.1.0.

Affected (CNA)

Vendor / product	Versions
TP-Link Systems Inc. / TP-Link KP303 (US) Smartplug	affected 0 before 1.1.0

CWE

No CWE identifiers supplied.

References

https://www.tp-link.com/us/support/faq/4619/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.