The vulnerability of TP-Link Tapo H200 and Tapo P100 devices’ microprogramming software lies in the improper verification of certificate authenticity. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

Tapo H200 and P100 have improper certificate verification, risking confidentiality and integrity.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2025-15557	5 Feb 202617:45	–	attackerkb
CNNVD	TP-LINK多款产品安全漏洞	5 Feb 202600:00	–	cnnvd
CVE	CVE-2025-15557	5 Feb 202617:45	–	cve
Cvelist	CVE-2025-15557 Improper Certificate Validation in TP-Link Tapo H100 and P100 Allows Man-in-the-Middle Attack	5 Feb 202617:45	–	cvelist
EUVD	EUVD-2025-206824	5 Feb 202617:45	–	euvd
NVD	CVE-2025-15557	5 Feb 202618:16	–	nvd
OSV	CVE-2025-15557	5 Feb 202618:16	–	osv
Positive Technologies	PT-2026-6601	5 Feb 202600:00	–	ptsecurity
RedhatCVE	CVE-2025-15557	6 Feb 202619:34	–	redhatcve
Vulnrichment	CVE-2025-15557 Improper Certificate Validation in TP-Link Tapo H100 and P100 Allows Man-in-the-Middle Attack	5 Feb 202617:45	–	vulnrichment