Smart plug

TP-Link HS103V5

Contribute

Projects for this device

Replacement firmware

Use supported smart-home devices locally with MQTT and Home Assistant integrations.

How to get started

Identify the controller, use its supported flashing tool and apply the device’s pin settings. The linked device record may show the wiring.

Setup
Controller-specific firmware installation + pin setup
You’ll need
Matching controller and pin configuration; first installation commonly needs a serial adapter.
Open device guidewww.elektroda.com
Sources

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVSS 8.7 (v4.0)

HS103 v5

Improper Authentication and Credential Exposure in Multiple TP-Link Kasa Devices

CVE-2026-108473

Affected firmware
Before 1.1.3 Build 250908 Rel.112508
Fix
Fix details in the linked record
Read TPLink CVE record
Details and sources

Multiple Kasa devices contain an improper authentication vulnerability in the local device-management protocol. An unauthenticated adjacent attacker may send management instructions to an affected device without adequate authentication or authorization, allowing modification of the device state or management settings. Under certain usage conditions involving interaction between the user, mobile application, and device-cloud service, insufficient protection of account-related communications may also expose account information.

Successful exploitation may allow an unauthenticated adjacent-network attacker to perform unauthorized device-management actions and disrupt legitimate user control. Under certain conditions, account-related information may also be exposed, potentially leading to compromise of the associated cloud account.

Check more security advisories for this device · CVE.org