CVE-2025-10991 | TP-Link Tapo D230S1 up to 1.2.1 missing protection mechanism for alternate hardware interface

September 30, 2025 Yanac

A vulnerability described as critical has been identified in TP-Link Tapo D230S1 up to 1.2.1. This issue affects some unknown processing. The manipulation results in missing protection mechanism for alternate hardware interface.

This vulnerability is reported as CVE-2025-10991. An attack on the physical device is feasible. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More