Security News > 2020 > July > Popular TP-Link Family of Kasa Security Cams Vulnerable to Attack

A popular consumer-grade security camera made by TP-Link and sold under the Kasa brand has bevy of bugs that open the hardware to remote attacks, such as giving hackers access to private video feeds and the ability to change device settings.

The most troubling bug Kent found was an insecure implementation of an SSL certificate on the Kasa mobile application.

In a blog post, publicly disclosing the TP-Link Kasa bugs, Kent describes the risks associated with the Kasa security cameras.

The flaw, in the case of the Kasa mobile application, left the door open to man-in-the-middle attacks.

Recently TP-Link models reviewed by the publication are the Kasa Cam KC120 and KC200, along with the Kasa Smart KC300S2 System.

News URL

https://threatpost.com/popular-tp-link-family-of-kasa-security-cams-vulnerable-to-attack/157371/