Tapo Cloud MQTT proxy server-side request forgery
Tapo cloud could be tricked into leaking internal data.
Summary
The MQTT proxy in the Tapo Cloud Service accepts a user-controlled host value without sufficient validation. An attacker can make the Tapo Cloud Service send requests to a server they control.
What to do
TP-Link fixed it on its cloud side; owners need do nothing.
Products and platforms
CVE IDs
Sources
- Advisory: tp-link.com (opens in a new tab)
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen