TP-Link Kasa Smart Plug 1 (KP115)

From Wiki-IoT
Revision as of 05:43, 24 October 2026 by ChenXu Zhao (talk | contribs) (KP115 is a Wi-Fi smart plug with energy monitoring. It supports cloud control and voice assistants, but its local LAN protocol has serious security weaknesses including weak encryption and insufficient authentication. Attackers in the same local network can send unauthorised commands to control the plug. Firmware updates are available from TP-Link to patch these vulnerabilities.)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)



TP-Link Kasa Smart Plug 1 (KP115)
Security Grade
   
     C
Calculator v
TP-Link Kasa Smart Plug KP115
   Category: Smart Plug • Model / Gen: 1 KP115

   Release Date: 2020-09-15 • Status: In sale

   Classification Date:  • Official Website

Security Evaluation

1. Device Security

Criterion Value Proof Comment
Known hardware tampering Rare 🔗 Proof
Known vulnerabilities Rare 🔗 Proof
Prior attacks Rare [[1](https://www.cve.org/CVERecord?id=CVE-2021-40457) 🔗 Proof]
Updatability Rare 🔗 Proof
Category Score Score: 2 / 3

2. System Security

Criterion Value Proof Comment
Authentication with other systems Partial 🔗 Proof
Communications Encrypted with obselete encryption 🔗 Proof
Storage Encrypted with obselete encryption 🔗 Proof
Category Score Score: 2 / 3

3. User Authentication

Criterion Value Proof Comment
Account management Basic 🔗 Proof
Authentication Basic 🔗 Proof
Brute-force protection Absent 🔗 Proof
Event logging Partial logging 🔗 Proof
Passwords Require change after setup 🔗 Proof
Category Score Score: 3 / 3

Technical Specifications

Property Details
Operating System & App Embedded RTOS (Companion App: Kasa Smart)
Hardware (CPU / GPU) CPU: Realtek RTL8720CM • GPU:
Memory & Storage Memory: 256KB RAM • Storage: 2MB Flash
Power, Battery & Charging Battery: No built-in battery • Power: 100–240V AC • Charging:
Display & Camera Display: No display • Camera: No camera
Sound & Connectivity Sound: No speaker or microphone • Connectivity: Wi-Fi 2.4GHz
Physical (Dimensions & Mass) Dimensions: 100.3 × 66.3 × 50.8 mm • Mass: 120g


This device only works on 2.4GHz Wi‑Fi. User identity relies entirely on the TP-Link cloud account, there is no built-in web admin page on the plug itself. CVE‑2026‑76784 and CVE‑2026‑108473 affect the local communication channel. Brute force protection and local audit logging are not implemented on the device side.

Retrieved from "http://fehmijaafar.net/wiki-iot/index.php?title=TP-Link_Kasa_Smart_Plug_1_(KP115)&oldid=9361"