CVE-2025-10991

Root Access via UART

High · published September 30, 2025

CVSS v4.0
7.0
EPSS
0%
Percentile
6.5
In the wild
Unconfirmed
What it is

The attacker may obtain root access by connecting to the UART port and this vulnerability requires the attacker to have the physical access to the device.

This issue affects Tapo D230S1 V1.20: before 1.2.2 Build 20250907.

The record
Technical detail
CVSS v4.0
7.0 · HIGH
Vector
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00174 · 6.5th percentile
Published
2025-09-30T00:08Z
EPSS history
Timeline
  • 30 SEP 00:08Z
    Root Access via UART
    cvelistv5