A critical vulnerability in TP-Link Kasa smart devices allows unauthenticated adjacent attackers to intercept, replay, or forge control messages, potentially resulting in unauthorized device manipulation.

The devices suffer from missing cryptographic steps (CWE-325) in their local communication protocol, which permits an unauthenticated attacker on the adjacent network to inject or manipulate control traffic.

Successful exploitation allows an attacker to gain unauthorized control over smart home hardware, leading to potential operational disruption or denial of service. Given the CVSS score of 8.7, this is a high-severity risk that could affect the physical environment, lead to safety concerns, or result in the loss of availability for critical smart infrastructure managed by these devices.

Immediate Action: Update the firmware of all affected TP-Link Kasa devices to the versions specified in the vendor advisory to implement the necessary cryptographic protections.

Proactive Monitoring: Monitor network traffic for unusual or unauthorized local communication patterns directed at smart home device ports.

Compensating Controls: Isolate smart home devices on a dedicated, segmented VLAN to restrict access from unauthorized devices on the local network.

Public Exploit Available: No

The high CVSS score reflects the significant risk posed by the lack of encryption in local device commands. Administrators should prioritize firmware updates for all listed devices to ensure the integrity of local control communications. If immediate patching is not feasible, network segmentation is highly recommended to mitigate the risk of unauthorized access.