What is CVE-2025-3442?

CVE-2025-3442 is a vulnerability in Tp-link Tapo H200 V1 Iot Smart Hub, classified under Cleartext Storage of Sensitive Information. Published 2025-04-09.

Is CVE-2025-3442 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Tp-link Tapo H200 V1 Iot Smart Hub

CVE-2025-3442

This vulnerability exists in TP-Link Tapo H200 V1 IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmware and analyzing the…

EPSS: 0.001 (2.1th percentile) — read the EPSS interpretation.

Affected products

Tp-link Tapo H200 V1 Iot Smart Hub — versions <=1.4.0

Weakness classification (CWE)

CWE-312 — Cleartext Storage of Sensitive Information

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

vdisclose@cert-in.org.in (third-party-advisory)

Frequently asked questions

What is CVE-2025-3442?: CVE-2025-3442 is a vulnerability in Tp-link Tapo H200 V1 Iot Smart Hub, classified under Cleartext Storage of Sensitive Information. Published 2025-04-09.
Is CVE-2025-3442 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.