CyberRota Analysis
AI-GeneratedThe TP-Link Kasa EC70 v4 and EC71 v4 devices are vulnerable due to an information disclosure flaw in their local discovery mechanism, which allows attackers on the same local network to access sensitive geolocation information without authentication. This vulnerability compromises confidentiality, enabling unauthorized retrieval of location data through specially crafted responses. Users of these devices, particularly those in environments with shared networks, should prioritize addressing this issue to safeguard sensitive information.
Original NVD Description
An information disclosure vulnerability was identified in TP-Link Kasa EC70 v4 and EC71 v4 in the local discovery mechanism, which exposes sensitive geolocation information without requiring authentication. This issue allows an attacker on the same local network to retrieve geolocation-related data through crafted responses. The vulnerability impacts confidentiality only, with no evidence of integrity of availability impact.
Related CVEs
Other vulnerabilities affecting the same vendor(s)