TP-Link Tapo P110 (V1)

TP-Link Tapo P110 (V1)
Security Grade B Calculator v1	TP-Link Tapo P110 Brand: TP-Link (Parent: TP-Link Systems Inc.) Category: Plug • Model / Gen: V1 Tapo P110 Release Date: 2021-08-01 • Status: In sale Classification Date: 2026-10-23 • Official Website

Security Evaluation

1. Device Security

Criterion	Value	Proof	Comment
Known hardware tampering	Rare	🔗 Proof	Reset control and plug enclosure are accessible, but there are no exposed data ports or removable media.
Known vulnerabilities	Rare	🔗 Proof	NVD documents CVE-2026-15314: an authenticated HTTP request can trigger a buffer overflow and denial of service.
Prior attacks	None	🔗 Proof	No public model-specific botnet campaign was found.
Updatability	Very common	🔗 Proof	TP-Link maintains a product-specific support/download page.
Category Score	Score: 2 / 3

2. System Security

Criterion	Value	Proof	Comment
Authentication with other systems	Partial	🔗 Proof	Alexa and Google Assistant integration through the Tapo account; no mutual authentication is documented.
Communications	Encrypted with up-to-date encryption	https://privacy.tp-link.com/web/official/privacy-policy?region=US 🔗 Proof	Cloud/mobile control is encrypted by the Tapo platform; local scheduling remains available.
Storage	Encrypted with up-to-date encryption	🔗 Proof	The plug stores schedules and energy data rather than user media; no local media storage is exposed.
Category Score	Score: 2 / 3

3. User Authentication

Criterion	Value	Proof	Comment
Account management	Basic	🔗 Proof	Tapo account, remote control, group control, and family sharing; role granularity is not documented.
Authentication	Basic	https://privacy.tp-link.com/web/official/privacy-policy?region=US 🔗 Proof	Account password login; device-specific 2FA is not documented.
Brute-force protection	Basic	https://privacy.tp-link.com/web/official/privacy-policy?region=US 🔗 Proof	No public lockout/rate-limit policy; partial evidence only.
Event logging	Partial logging	🔗 Proof	Energy history and app event notifications exist; administrator access logs are not documented.
Passwords	Require change after setup with complexity requirements	https://www.tapo.com/en/product/tapo-p110-smart-plug/v1/1-pack/support/ 🔗 Proof	No shared default device password is documented; setup uses a user-created Tapo account.
Category Score	Score: 2 / 3

Technical Specifications

Property	Details
Operating System & App	Embedded firmware (Companion App: Tapo app (Android/iOS))
Hardware (CPU / GPU)	CPU: • GPU:
Memory & Storage	Memory: • Storage:
Power, Battery & Charging	Battery: No • Power: • Charging: No
Display & Camera	Display: No • Camera:
Sound & Connectivity	Sound: • Connectivity: 2.4 GHz Wi-Fi
Physical (Dimensions & Mass)	Dimensions: • Mass:

Prepared from public product documentation, vendor security information, and NVD records. The release date is approximate where the vendor did not state a day. No device was physically tested, scanned, or attacked. Each score links to the public evidence used for the assessment.