| TP-Link HS110 Smart Plug
|
|
Security Grade
Calculator v1
|
TP-Link HS110 Smart Plug
Release Date: 2016-01-15 • Status: End of sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
🔗 Proof
|
Hardware modification and firmware dumping widely documented
|
| Known vulnerabilities
|
Very common
|
🔗 Proof
|
Multiple critical remote code execution vulnerabilities
|
| Prior attacks
|
Very common
|
🔗 Proof
|
Used in Mirai botnet attacks
|
| Updatability
|
Rare
|
🔗 Proof
|
Firmware updates ended years ago
|
| Category Score
|
Score: 3 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Partial
|
🔗 Proof
|
Weak authentication, default password risks
|
| Communications
|
No encryption
|
🔗 Proof
|
Local traffic unencrypted
|
| Storage
|
No encryption
|
🔗 Proof
|
Local configuration stored without encryption
|
| Category Score
|
Score: 3 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Basic
|
🔗 Proof
|
Cloud account exists but local device has weak auth
|
| Authentication
|
Absent
|
🔗 Proof
|
Default credentials widely known
|
| Brute-force protection
|
Basic
|
🔗 Proof
|
No rate limiting for login attempts
|
| Event logging
|
Absent
|
🔗 Proof
|
No local access logs
|
| Passwords
|
Require change after setup with complexity requirements
|
🔗 Proof
|
Simple passwords allowed, no forced rotation
|
| Category Score
|
Score: 3 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Custom embedded TP-Link OS (Companion App: Kasa Smart)
|
| Hardware (CPU / GPU)
|
CPU: Qualcomm QCA4010 • GPU: N/A
|
| Memory & Storage
|
Memory: 128 KB RAM • Storage: 1 MB flash
|
| Power, Battery & Charging
|
Battery: No battery, mains powered • Power: 100–240V AC • Charging: N/A
|
| Display & Camera
|
Display: LED indicator only • Camera: None
|
| Sound & Connectivity
|
Sound: No speaker • Connectivity: Wi‑Fi 802.11 b/g/n
|
| Physical (Dimensions & Mass)
|
Dimensions: Height:100 mm / Width:66 mm / Thickness:77 mm • Mass: 185 g
|
Device Overview
- Manufacturer: TP-Link
- Model Number: HS110
- Firmware Versions affected: 1.5.0 and earlier
- Use-case: Wi-Fi smart power plug, energy monitoring, remote on/off control.
Vulnerabilities & Attack Surface
- CVE ID: CVE-2020-8328
- Vulnerability description: The local communication protocol uses weak XOR encryption. LAN attackers can sniff and forge control commands.
- Attack vector: Adjacent network (LAN).
CIA Triad Impact Analysis
- Confidentiality: Power usage data and device token intercepted.
- Integrity: Attacker toggle outlet state arbitrarily.
- Availability: Flood forged commands to crash device service.
Mitigations / Countermeasures
- 1. Apply latest TP-Link firmware update.
- 2. Isolate IoT devices on separate VLAN.
- 3. Avoid exposing plug to internet port forwarding.
- 4. Use cloud authentication only over TLS.
References
[1] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8328
[2] TP-Link security notice for HS series
