EUVD-2025-28803

Malicious code in bioql PyPI...

The vulnerability of TP-Link KP303 device’s microprogramming software lies in the lack of authentication for critical functions. This allows attackers to execute arbitrary commands, cause malfunctions, or disclose protected information.

The vulnerability of TP-Link KP303 microprogramming software is related to the absence of authentication for critical functions. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands, cause service failures, or disclose protected information...

CVE-2025-8627

The TP-Link KP303 Smartplug can be issued unauthenticated protocol commands that may cause unintended power-off condition and potential information leak. This issue affects TP-Link KP303 US Smartplug: before 1.1.0...

CVE-2025-8627 Unauthenticated Protocol Commands on TP-Link KP303

The TP-Link KP303 Smartplug can be issued unauthenticated protocol commands that may cause unintended power-off condition and potential information leak. This issue affects TP-Link KP303 US Smartplug: before 1.1.0...

CVE-2025-8627: Missing Authentication for Critical Function

The TP-Link KP303 Smartplug can be issued unauthenticated protocol commands that may cause unintended power-off condition and potential information leak. This issue affects TP-Link KP303 US Smartplug: before 1.1.0...

TP-Link KP303 安全漏洞

TP-Link KP303 is a smart plug-in board from China P&L TP-Link. A security vulnerability exists in the TP-Link KP303 version prior to 1.1.0, which stems from the ability to issue unauthenticated protocol commands that could result in unexpected power loss and information disclosure...