Statement on Root Access via UART on Tapo D230S1 (CVE-2025-10991)

Vulnerability Description:

The attacker may obtain root access by connecting to the UART port and this vulnerability requires the attacker to have the physical access to the device. This issue affects Tapo D230S1 V1.20: before 1.2.2 Build 20250907.

Impact:

This vulnerability may allow the attacker to control the device as the root user.

CVSS v4.0 Score: 7.0 / High

CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Products/Versions and Fixes:

Recommendation(s):

We strongly recommended that users with the affected device(s) take the following action(s):

1. Download and update to the latest firmware to fix the vulnerabilities by following the instructions here: https://www.tp-link.com/us/support/faq/2621/

Disclaimer:

If you do not take the recommended action(s) stated above, this vulnerability concern will remain. TP-Link cannot bear any responsibility for the consequences that could have been avoided by following the recommended action(s) in this statement.