High severity7.6NVD Advisory· Published Sep 30, 2024· Updated Apr 15, 2026

CVE-2024-46549

Description

An issue in the TP-Link MQTT Broker and API gateway of TP-Link Kasa KP125M v1.0.3 allows attackers to establish connections by impersonating devices owned by other users.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

TP-Link/Kasa KP125Mllm-create
Range: = 1.0.3

Patches

Vulnerability mechanics

References

github.com/Chapoly1305/tp-link-cve/blob/main/CVE-2024-46549.mdnvd

News mentions

No linked articles in our index yet.

cvss	0.494
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000