CVE-2026-15314

Katalog CVE

CVSS 7.5 · High EPSS 0,76%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada tp-link tapo p110 firmware. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Tapo P110 v1 smart Wi-Fi Plug contains an improper boundary validation vulnerability in the handling of authenticated HTTP request bodies due to insufficient input validation before memory copy operations. This may lead to buffer overflow condition, causing the web service process to crash. Successful exploitation may cause the web service process to stop responding or restart, resulting in a denial-of-service condition.

Rincian

Terbit di NVD

4 Agustus 2026

Terakhir diubah

7 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

0,76% peluang dieksploitasi; lebih tinggi dari 54,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.tp-link.com/us/support/faq/5220/ advisory vendor
• https://www.tp-link.com/en/support/download/tapo-p110/v1/#Firmware-Release-Notes release notes
• https://www.tp-link.com/us/support/download/tapo-p110/v1/#Firmware-Release-Notes release notes