TP-Link Kasa camera flaws expose admin credentials and device location on local networks

Researchers identified flaws in the TP-Link Kasa EC70 and EC71 camera models that let an attacker already on the same local network steal administrator credentials and infer the camera's location. The attack does not appear to require internet-wide exposure, but it still matters because many small offices and homes assume local networks are trustworthy. Once an attacker gains local access, credential theft could lead to full device takeover and persistent monitoring. Location leakage also increases privacy risk by revealing where a camera is deployed. The findings are important for consumer and SMB environments that rely on inexpensive connected cameras without strong segmentation. They also reinforce the need to isolate IoT devices from workstations and sensitive systems.

Source: Vulnerability – InfoTech News