CVE-2024-10523

Name of the Vulnerable Software and Affected Versions TP-Link IoT Smart Hub (affected versions not specified)

Description The issue exists due to the storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmware and analyzing the binary data to obtain the Wi-Fi credentials stored on the vulnerable device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.