A plaintext storage flaw in the firmware of the Tapo S505 allows an attacker with physical access to the device to read a device‑specific private key from nonvolatile memory. The key exposure enables the attacker to potentially decrypt or forge encrypted communications or access protected information related to the device, thereby compromising its confidentiality and integrity.

The vulnerability affects TP‑Link System Inc.’s Tapo S505, firmware version 1.6. No other product or version information is provided. The flaw requires physical access to the device, so it is not exploitable over the network.

With a CVSS score of 5.4 the risk is considered moderate. EPSS information is not available, and the vulnerability is not listed in the CISA KEV catalog. Exfiltration of the key requires proximity to the device, but once obtained the key can facilitate unauthorized access to device communications or data. The threat is localized to devices in which the affected firmware is installed and to attackers who can physically reach the device.