CVE-2025-4975
Tapo privilege escalation on shared devices using notifications
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Tapo privilege escalation on shared devices using notifications
When a notification relating to low battery appears for a user with whom the device has been shared, tapping the notification grants full access to the power settings of that device.
Reserved 2025-05-20 | Published 2025-05-22 | Updated 2025-05-23 | Assigner TPLinkCWE-269 Improper Privilege Management
www.tp-link.com/us/support/faq/4464/
play.google.com/...e/apps/details?id=com.tplink.iot&hl=en_US
Support options
