CVE-2024-46548: TP-Link Tapo P125M · Information Exposure
Source CVE Database V5
Not known to be exploited · CVSS 6.3 Medium.
Data as of 26 Oct 2026, 17:16 UTC
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 5% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:LExploitation evidence
Disclosed: evidence found.
CVE published 30 Sep 2024
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
AI-suggested
- Network Segmentation: Isolate smart home devices like TP-Link Tapo P125M and Kasa KP125M on separate VLANs or guest networks to limit exposure to potential attackers.
- Monitor Network Traffic: Deploy network intrusion detection systems (NIDS) to identify unusual traffic patterns or MitM attempts targeting IoT devices.
- Use VPNs or Encrypted Tunnels: Where possible, route device communications through secure VPNs to add an additional encryption layer beyond TLS.
- Limit Network Access: Restrict physical and wireless network access to trusted users and devices to reduce the risk of MitM attacks.
- User Awareness: Educate users about the risks of connecting to untrusted networks and the importance of verifying device firmware updates.
- Firmware Updates: Regularly check TP-Link’s official channels for firmware updates addressing this vulnerability and apply patches promptly once available.
- Disable Unnecessary Features: Turn off remote management or cloud connectivity features if not required to reduce attack surface.
- Employ Strong Authentication: Use strong, unique credentials for device management interfaces to prevent unauthorized access if MitM leads to credential exposure. These steps, combined, help mitigate the risk until an official patch is released.
Description
TP-Link Tapo P125M and Kasa KP125M v1.0.3 was discovered to improperly validate certificates, allowing attackers to eavesdrop on communications and access sensitive information via a man-in-the-middle attack.