CVE-2023-38908: TP-Link Tapo

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, and Tapo Application 2.8.14 allows a remote attacker to obtain sensitive information via the TSKEP authentication function.

Affected products

• TP-Link Tapo: version 2.8.14 only
• TP-Link Tapo l530e Firmware: version 1.0.0 only

Published 2023-08-22. Last modified 2026-06-17.