A sensitive information disclosure vulnerability in the cloud-client daemon of Deco BE63 allows authenticated attackers to retrieve the plaintext…
A sensitive information disclosure vulnerability in the cloud-client daemon of Deco BE63 allows authenticated attackers to retrieve the plaintext TP-Link ID account password. Successful exploitation may allow attackers to compromise the associated cloud account and perform unauthorized actions on behalf of the affected user.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- TP-Link
- Product
- TP-Link routers / Omada / Tapo
- Exposure class
- Edge / VPN / firewall
Why it ranks 12 (Routine)
- Exposed product class: edge / VPN / firewall
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.