P110 V1
Monthly
Buffer overflow in the TP-Link Tapo P110 v1 smart plug's HTTP request handling allows an adjacent-network attacker to crash the web service process, resulting in a denial-of-service condition. The device's web service performs a memory copy of HTTP request body data without validating input length against the destination buffer, enabling an oversized payload to corrupt adjacent memory regions. No public exploit code or CISA KEV listing exists at time of analysis; a vendor-released firmware patch is available via the TP-Link download portal.
Buffer overflow in the TP-Link Tapo P110 v1 smart plug's HTTP request handling allows an adjacent-network attacker to crash the web service process, resulting in a denial-of-service condition. The device's web service performs a memory copy of HTTP request body data without validating input length against the destination buffer, enabling an oversized payload to corrupt adjacent memory regions. No public exploit code or CISA KEV listing exists at time of analysis; a vendor-released firmware patch is available via the TP-Link download portal.