Multiple TP-Link Cameras Vulnerability Allows Hackers to Launch MitM Attacks
\n \t
\n
<\/BR>
\n
\n \t
\n
<\/BR><\/p>\n
TP-Link has released security updates for two vulnerabilities in its Kasa EC70 v4 and EC71 v4 smart cameras. These flaws, tracked as CVE-2026-9770 and CVE-2026-13230, could allow an attacker on the same local network to obtain sensitive information from vulnerable devices<\/a>.<\/p>\n The most serious issue, CVE-2026-9770, is a hardware cryptographic<\/a> key information disclosure vulnerability with a CVSS score of 8.6 (High). TP-Link has indicated that a hardcoded cryptographic key is embedded within the camera\u2019s system image.<\/p>\n An attacker with access to the local network could exploit this exposed key to compromise the confidentiality of communications between the camera and its web management interface.<\/p>\n Successful exploitation could facilitate man-in-the-middle attacks, enabling the attacker to intercept traffic or obtain administrative credentials.<\/p>\n A man-in-the-middle attack<\/a> occurs when a threat actor secretly positions themselves between a device and a service or management interface.<\/p>\n For example, an attacker on a shared Wi-Fi network, a compromised home router, or a poorly segmented office network could potentially observe or manipulate communications involving the affected camera.<\/p>\n The second flaw, CVE-2026-13230, impacts the cameras\u2019 local discovery response mechanism. This vulnerability has received a CVSS score of 5.3, rated as Medium.<\/p>\n According to TP-Link, the discovery service can expose sensitive, geolocation-related information<\/a> without authentication. An attacker on the same local network could send crafted discovery requests or responses to retrieve location-related data from a vulnerable camera.<\/p>\n TP-Link stated that this issue affects confidentiality only, with no identified impact on device integrity or availability.<\/p>\n Both vulnerabilities affect the Kasa EC70 v4 and EC71 v4 camera models. TP-Link has addressed these issues in firmware version 2.4.0 Build 20260520 and version 2.4.1 Build 20260621.<\/p>\n Users should update their camera firmware through TP-Link\u2019s official support portal<\/a> or the Kasa app, and ensure the Kasa mobile app is also updated to the latest version.<\/p>\n Until updates are installed, users should reduce their exposure by placing smart cameras on a separate IoT network, using strong Wi-Fi encryption, restricting access to the local network, and ensuring routers are running the latest firmware.<\/p>\n Network segmentation can limit an attacker\u2019s ability to reach camera management interfaces if another device on the network is compromised. TP-Link urges customers to promptly apply available fixes, warning that unpatched devices may remain vulnerable.<\/p>\n \u00a0Strengthen Your SOC by Accelerating Threat Detection & Rapid Investigations.\u00a0->\u00a0Integrate ANY.RUN With Your SOC\u00a0<\/a>Now<\/a><\/strong>.<\/strong><\/p>\n The post Multiple TP-Link Cameras Vulnerability Allows Hackers to Launch MitM Attacks<\/a> appeared first on Cyber Security News<\/a>.<\/p>\n<\/div>\nTP-Link Cameras Vulnerability<\/strong><\/h2>\n