Vulnerability in TP-Link Tapo H200 V1 Iot Smart Hub

CVE-2025-3442

This vulnerability exists in TP-Link Tapo H200 V1 IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmware and analyzing the binary data to obtain the Wi-Fi credentials stored on the vulnerable device.

Published · last modified .

EPSS exploit prediction

EPSS: 0.001 (2.4th percentile), scored .

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 2nd percentile — 2.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS trend (30 days)EPSS over the last 30 days for CVE-2025-3442: held from 0.001 to 0.001.

EPSS over last 30 days · oldest: 0.001 · newest: 0.001 · change: +0.000

Affected products

Weakness classification (CWE)

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2025-3442?
CVE-2025-3442 is a vulnerability in TP-Link Tapo H200 V1 Iot Smart Hub, classified under Cleartext Storage of Sensitive Information. Published 2025-04-09.
Is CVE-2025-3442 known to be exploited?
1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.