The vulnerability of the built-in software for the Tapo D230S1 door lock lies in the lack of authentication for a critical function, allowing intruders to elevate their privileges to root level.

The vulnerability of the built-in software on the Tapo D230S1 door lock is related to the absence of authentication for a critical function. Exploiting this vulnerability can allow an intruder to elevate their privileges to the root level...

EUVD-2025-31665

Malicious code in bioql PyPI...

CVE-2025-10991

The attacker may obtain root access by connecting to the UART port and this vulnerability requires the attacker to have the physical access to the device. This issue affects Tapo D230S1 V1.20: before 1.2.2 Build 20250907...

CVE-2025-10991

The attacker may obtain root access by connecting to the UART port and this vulnerability requires the attacker to have the physical access to the device. This issue affects Tapo D230S1 V1.20: before 1.2.2 Build 20250907...

CVE-2025-10991 Root Access via UART

The attacker may obtain root access by connecting to the UART port and this vulnerability requires the attacker to have the physical access to the device. This issue affects Tapo D230S1 V1.20: before 1.2.2 Build 20250907...

CVE-2025-10991 Root Access via UART

The attacker may obtain root access by connecting to the UART port and this vulnerability requires the attacker to have the physical access to the device. This issue affects Tapo D230S1 V1.20: before 1.2.2 Build 20250907...

CVE-2025-10991

CVE-2025-10991 affects TP-Link TP-Link Tapo D230S1 (V1.20) prior to 1.2.2 Build 20250907. The issue enables a local attacker to obtain root access by connecting to the UART port, requiring physical access to the device. Impact is described as total on technical metrics, with high confidentiality,...

TP-Link Tapo D230S1 安全漏洞

TP-Link Tapo D230S1 is a wireless smart visual doorbell kit from China P&L TP-Link. A security vulnerability exists in versions prior to TP-Link Tapo D230S1 V1.20 1.2.2 Build 20250907, which originates from an attacker being able to gain root access by connecting to the UART port, which may resul...

PT-2025-39924

Name of the Vulnerable Software and Affected Versions Tapo D230S1 versions prior to 1.2.2 Build 20250907 Description An attacker may gain root access by connecting to the UART port. This requires physical access to the device. Recommendations Update to version 1.2.2 Build 20250907 or later...

CVE-2025-10991: Missing Authentication for Critical Function

The attacker may obtain root access by connecting to the UART port and this vulnerability requires the attacker to have the physical access to the device. This issue affects Tapo D230S1 V1.20: before 1.2.2 Build 20250907...