CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.8. See the original NVD description below for full technical details.
CVE
CVE-2025-15557
Severity
HIGH
CVSS
8.8
EPSS
0.18%
Original NVD Description
An Improper Certificate Validation vulnerability in TP-Link Tapo H100 v1 and Tapo P100 v1 allows an on-path attacker on the same network segment to intercept and modify encrypted device-cloud communications. This may compromise the confidentiality and integrity of device-to-cloud communication, enabling manipulation of device data or operations.
Related CVEs
Other vulnerabilities affecting the same vendor(s)