What’s Vulnerable › Vulnerabilities

CVE-2023-27098

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-01-09 · updated 2026-07-09
• Weakness: CWE-312

Description

TP-Link Tapo APK up to v2.12.703 uses hardcoded credentials for access to the login panel.

Affected products

• TP-Link Tapo: before 2.11.44 — fixed in 2.11.44

How to fix

Upgrade to a fixed version: TP-Link Tapo 2.11.44. Check the vendor advisory for mitigations.

References

• https://github.com/c0d3x27/CVEs/tree/main/CVE-2023-27098
• https://www.tp-link.com/support/contact-technical-support/#LiveChat-Support
• https://github.com/c0d3x27/CVEs/tree/main/CVE-2023-27098
• https://www.tp-link.com/support/contact-technical-support/#LiveChat-Support

Get alerted when CVE-2023-27098 or the next vulnerability affects your stack