CVE-2026-76784
2026-08-26
18h17 +00:00
18h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
Multiple
TP-Link Kasa smart home devices contain insufficient cryptographic protections
in the local device communication protocol. An adjacent network attacker may
intercept, replay or forge locally exchanged control messages, potentially
resulting in unauthorized device control.
Successful
exploitation could allow an attacker to manipulate the operational state of an
affected device, resulting in unauthorized state changes, disruption of normal
device functionality or a denial-of-service condition.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Missing Cryptographic Step The product does not implement a required step in a cryptographic algorithm, resulting in weaker encryption than advertised by the algorithm. |
