High severity7.5NVD Advisory· Published Sep 25, 2023· Updated Jun 17, 2026

CVE-2023-38907

Description

An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, and Tapo Application 2.8.14 allows a remote attacker to replay old messages encrypted with a still valid session key.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

TP-Link/Tapo
cpe:2.3:a:tp-link:tapo:2.8.14:*:*:*:*:*:*:*
TP-Link/Tapo L530e Firmware
cpe:2.3:o:tp-link:tapo_l530e_firmware:1.0.0:*:*:*:*:*:*:*
TPLink/Smart Bulb Tapo seriesdescription
TP-Link/Tapo L530llm-create
Range: <1.2.4
TP-Link/Tapo L510Ellm-create
Range: <1.1.0
TP-Link/Tapo L630llm-create
Range: <1.0.4
TP-Link/Tapo Applicationllm-fuzzy
Range: <2.8.14
TP-Link/Tapo P100llm-fuzzy
Range: <1.5.0

Patches

Vulnerability mechanics

References

arxiv.org/abs/2308.09019nvdTechnical DescriptionThird Party Advisory
www.scitepress.org/PublicationsDetail.aspxnvdThird Party Advisory
www.dmi.unict.it/giamp/smartbulbscanbehackedtohackintoyourhousehold/nvd
www.scitepress.org/Papers/2023/120929/120929.pdfnvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000