| TP-Link Tapo L530E Smart Bulb (Tapo L530E) | ||
|---|---|---|
|
Security Grade
Calculator v
|
TP-Link Tapo L530E Smart Bulb
Brand: TP-Link (Parent: TP-Link Technologies Co., Ltd.) Category: Smart Wi-Fi Light Bulb • Model / Gen: 1 Tapo L530E Release Date: 2021-06-01 • Status: In sale Classification Date: • Official Website | |
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | Rare | 🔗 Proof | Physical disassembly rarely occurs for consumer bulbs. |
| Known vulnerabilities | Very common | 🔗 Proof | Multiple published vulnerabilities affect this device model. |
| Prior attacks | Rare | 🔗 Proof | Exploitation attacks targeting this IoT bulb are uncommon. |
| Updatability | Very common | 🔗 Proof | Official firmware updates are regularly provided by the vendor. |
| Category Score | Score: 2 / 3 | ||
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | Partial | 🔗 Proof | Only basic cloud binding verification exists. |
| Communications | Encrypted with obselete encryption | 🔗 Proof | Network traffic uses outdated encryption algorithms. |
| Storage | No encryption | 🔗 Proof | Sensitive Wi-Fi data is stored without encryption protection. |
| Category Score | Score: 3 / 3 | ||
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Basic | 🔗 Proof | Only basic user account creation and binding functions. |
| Authentication | Basic | 🔗 Proof | Simple password verification without advanced security. |
| Brute-force protection | Absent | 🔗 Proof | No automatic blocking for password guessing attempts. |
| Event logging | Partial logging | 🔗 Proof | Only partial device connection and operation logs saved. |
| Passwords | Default/Common/Easy to guess | 🔗 Proof | Default weak passwords are commonly used by users. |
| Category Score | Score: 3 / 3 | ||
| Property | Details |
|---|---|
| Operating System & App | Tapo RTOS (Companion App: Tapo) |
| Hardware (CPU / GPU) | CPU: BK7231N • GPU: None |
| Memory & Storage | Memory: 2MB • Storage: 4MB Flash |
| Power, Battery & Charging | Battery: None • Power: 100–240V AC, 8.7W • Charging: Not applicable |
| Display & Camera | Display: None • Camera: None |
| Sound & Connectivity | Sound: None • Connectivity: Wi‑Fi 2.4GHz, BLE |
| Physical (Dimensions & Mass) | Dimensions: 60 × 110 mm • Mass: 110g |
IDRS Grade: D. Multiple vulnerabilities allow attackers to extract plaintext Wi-Fi credentials from mobile app traffic. Weak authentication puts the whole local network at risk.
