Read the docs
TI-2025-08518 Aliases CVE-2025-9293GHSA-h573-p6v2-3p2p

Insufficient Certificate Validation in Multiple Mobile Applications Allows Man in the Middle Interception

Priority LOW 35CWE-295Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Passive
Attack complexity
Low
Attack requirements
Present
Impact type
Spoofing
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-295.

Summary

A vulnerability in the certificate validation logic may allow applications to accept untrusted or improperly validated server identities during TLS communication. An attacker in a privileged network position may be able to intercept or modify traffic if they can position themselves within the communication channel. Successful exploitation may compromise confidentiality, integrity, and availability of application data.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00245 15th percentileScored 2026-11-07
Fix Fixed Tapo App (TP-Link Systems Inc.): 3.14.111Kasa App (TP-Link Systems Inc.): 3.4.350+12 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
TP-LinkTapo Appbefore 3.14.1113.14.111Patch availableCNA
TP-LinkKasa Appbefore 3.4.3503.4.350Patch availableCNA
TP-LinkOmada Appbefore 4.25.254.25.25Patch availableCNA
TP-LinkOmada Guardbefore 1.1.281.1.28Patch availableCNA
TP-LinkTether Appbefore 4.12.274.12.27Patch availableCNA
TP-LinkDeco Appbefore 3.9.1633.9.163Patch availableCNA
TP-LinkAginet Appbefore 2.13.62.13.6Patch availableCNA
TP-LinktpCamera Appbefore 3.2.173.2.17Patch availableCNA
TP-LinkWiFi Toolkitbefore 1.4.281.4.28Patch availableCNA
TP-LinkFesta Appbefore 1.7.11.7.1Patch availableCNA
TP-LinkWi-Fi Navibefore 1.5.51.5.5Patch availableCNA
TP-LinkKidShieldbefore 1.1.211.1.21Patch availableCNA
TP-LinkTP-Partner Appbefore 2.0.12.0.1Patch availableCNA
TP-LinkVIGI Appbefore 2.7.702.7.70Patch availableCNA
  • Tapo App VendorTP-Link Affected before 3.14.111 Fixed in 3.14.111 Patch available CNA
  • Kasa App VendorTP-Link Affected before 3.4.350 Fixed in 3.4.350 Patch available CNA
  • Omada App VendorTP-Link Affected before 4.25.25 Fixed in 4.25.25 Patch available CNA
  • Omada Guard VendorTP-Link Affected before 1.1.28 Fixed in 1.1.28 Patch available CNA
  • Tether App VendorTP-Link Affected before 4.12.27 Fixed in 4.12.27 Patch available CNA
  • Deco App VendorTP-Link Affected before 3.9.163 Fixed in 3.9.163 Patch available CNA
  • Aginet App VendorTP-Link Affected before 2.13.6 Fixed in 2.13.6 Patch available CNA
  • tpCamera App VendorTP-Link Affected before 3.2.17 Fixed in 3.2.17 Patch available CNA
  • WiFi Toolkit VendorTP-Link Affected before 1.4.28 Fixed in 1.4.28 Patch available CNA
  • Festa App VendorTP-Link Affected before 1.7.1 Fixed in 1.7.1 Patch available CNA
  • Wi-Fi Navi VendorTP-Link Affected before 1.5.5 Fixed in 1.5.5 Patch available CNA
  • KidShield VendorTP-Link Affected before 1.1.21 Fixed in 1.1.21 Patch available CNA
  • TP-Partner App VendorTP-Link Affected before 2.0.1 Fixed in 2.0.1 Patch available CNA
  • VIGI App VendorTP-Link Affected before 2.7.70 Fixed in 2.7.70 Patch available CNA

CPE configurations NVD · 14

CPEVersionsRoleVendor
cpe:2.3:a:tp-link:aginet:*:*:*:*:*:*:*:*before 2.13.6VulnerableTP-Link
cpe:2.3:a:tp-link:deco:*:*:*:*:*:*:*:*before 3.9.163VulnerableTP-Link
cpe:2.3:a:tp-link:festa:*:*:*:*:*:*:*:*before 1.7.1VulnerableTP-Link
cpe:2.3:a:tp-link:kasa:*:*:*:*:*:*:*:*before 3.4.350VulnerableTP-Link
cpe:2.3:a:tp-link:kidshield:*:*:*:*:*:*:*:*before 1.1.21VulnerableTP-Link
cpe:2.3:a:tp-link:omada:*:*:*:*:*:*:*:*before 4.25.25VulnerableTP-Link
cpe:2.3:a:tp-link:omada_guard:*:*:*:*:*:*:*:*before 1.1.28VulnerableTP-Link
cpe:2.3:a:tp-link:tapo:*:*:*:*:*:*:*:*before 3.14.111VulnerableTP-Link
cpe:2.3:a:tp-link:tether:*:*:*:*:*:*:*:*before 4.12.27VulnerableTP-Link
cpe:2.3:a:tp-link:tp-partner:*:*:*:*:*:*:*:*before 2.0.1VulnerableTP-Link
  • cpe:2.3:a:tp-link:aginet:*:*:*:*:*:*:*:* Versions before 2.13.6 Vulnerable ·TP-Link
  • cpe:2.3:a:tp-link:deco:*:*:*:*:*:*:*:* Versions before 3.9.163 Vulnerable ·TP-Link
  • cpe:2.3:a:tp-link:festa:*:*:*:*:*:*:*:* Versions before 1.7.1 Vulnerable ·TP-Link
  • cpe:2.3:a:tp-link:kasa:*:*:*:*:*:*:*:* Versions before 3.4.350 Vulnerable ·TP-Link
  • cpe:2.3:a:tp-link:kidshield:*:*:*:*:*:*:*:* Versions before 1.1.21 Vulnerable ·TP-Link
  • cpe:2.3:a:tp-link:omada:*:*:*:*:*:*:*:* Versions before 4.25.25 Vulnerable ·TP-Link
  • cpe:2.3:a:tp-link:omada_guard:*:*:*:*:*:*:*:* Versions before 1.1.28 Vulnerable ·TP-Link
  • cpe:2.3:a:tp-link:tapo:*:*:*:*:*:*:*:* Versions before 3.14.111 Vulnerable ·TP-Link
  • cpe:2.3:a:tp-link:tether:*:*:*:*:*:*:*:* Versions before 4.12.27 Vulnerable ·TP-Link
  • cpe:2.3:a:tp-link:tp-partner:*:*:*:*:*:*:*:* Versions before 2.0.1 Vulnerable ·TP-Link
Show 4 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:tp-link:tpcamera:*:*:*:*:*:*:*:*before 3.2.17VulnerableTP-Link
cpe:2.3:a:tp-link:vigi:*:*:*:*:*:*:*:*before 2.7.70VulnerableTP-Link
cpe:2.3:a:tp-link:wi-fi_navi:*:*:*:*:*:*:*:*before 1.5.5VulnerableTP-Link
cpe:2.3:a:tp-link:wifi_toolkit:*:*:*:*:*:*:*:*before 1.4.28VulnerableTP-Link
  • cpe:2.3:a:tp-link:tpcamera:*:*:*:*:*:*:*:* Versions before 3.2.17 Vulnerable ·TP-Link
  • cpe:2.3:a:tp-link:vigi:*:*:*:*:*:*:*:* Versions before 2.7.70 Vulnerable ·TP-Link
  • cpe:2.3:a:tp-link:wi-fi_navi:*:*:*:*:*:*:*:* Versions before 1.5.5 Vulnerable ·TP-Link
  • cpe:2.3:a:tp-link:wifi_toolkit:*:*:*:*:*:*:*:* Versions before 1.4.28 Vulnerable ·TP-Link

Remediation

  • Fix · CNA Tapo App (TP-Link Systems Inc.) Fixed in 3.14.111
  • Fix · CNA Kasa App (TP-Link Systems Inc.) Fixed in 3.4.350
  • Fix · CNA Omada App (TP Link Systems Inc.) Fixed in 4.25.25
  • Fix · CNA Omada Guard (TP-Link Systems Inc.) Fixed in 1.1.28
  • Fix · CNA Tether App (TP-Link Systems Inc.) Fixed in 4.12.27
  • Fix · CNA Deco App (TP-Link Systems Inc.) Fixed in 3.9.163
  • Fix · CNA Aginet App (TP-Link Systems Inc.) Fixed in 2.13.6
  • Fix · CNA tpCamera App (TP-Link Systems Inc.) Fixed in 3.2.17
  • Fix · CNA WiFi Toolkit (TP-Link Systems Inc.) Fixed in 1.4.28
  • Fix · CNA Festa App (TP-Link Systems Inc.) Fixed in 1.7.1
  • Fix · CNA Wi-Fi Navi (TP-Link Systems Inc.) Fixed in 1.5.5
  • Fix · CNA KidShield (TP-Link Systems Inc.) Fixed in 1.1.21
  • Fix · CNA TP-Partner App (TP-Link Systems Inc.) Fixed in 2.0.1
  • Fix · CNA VIGI App (TP-Link Systems Inc.) Fixed in 2.7.70

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-9293
  2. 2026-10-03 Alias added: GHSA-h573-p6v2-3p2p

References

Advisory 2

  • TI-2025-08517 Permissive Web Security Policy Allows Cross-Origin Access Control Bypass on Omada Cloud Controllers CVSS 4.0LOW 2.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences