Christopher Childress

**Name of the Vulnerable Software and Affected Versions** TP-Link Kasa EC70 v4 TP-Link Kasa EC71 v4 **Description** An information disclosure issue exists in the local discovery mechanism. This allows an unauthenticated attacker on the same local network to retrieve sensitive geolocation information by sending crafted responses. The issue affects confidentiality without impacting integrity or availability. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Kasa EC71 v4 Kasa EC70 v4 **Description** The firmware contains a static cryptographic private key stored in a read-only filesystem that is shared across devices. An attacker with access to the firmware image can extract this embedded key. Successful exploitation may allow an unauthenticated attacker on the same network to use the key within the web management service, compromising the confidentiality of encrypted communications. This can lead to the theft of admin credentials through passive decryption of traffic or active man-in-the-middle (MITM) attacks, where an attacker intercepts and potentially alters communication between two parties. **Recommendations** Update the firmware for Kasa EC71 v4. Update the firmware for Kasa EC70 v4.