The most popular WiFi light on Amazon allows hackers to access your WiFi network

The TP-Link Tapo L530E contains security holes that strangers can use to gain access to your WLAN and thus also to the devices in it.

Control your lighting with your cell phone: Sounds great, but not everyone wants to set up a smart home system for it. That’s why there Smart wifi lightsWith which you save yourself time-consuming setup and relay boxes: just screw the bulb into the socket, install the app on your mobile phone and your smart lighting is ready.

A particularly common example is the lamp TP-Link Taboo L530E. It costs 10 euros on Amazon, is it available? Best seller in the WiFi light category It has more than 11,000 reviews. Most of them are positive, resulting in an overall rating of 4.3.

Therefore, researchers in the field of information technology security chose the lamp to identify problems with it Internet of Things devices to draw attention to. In fact, they found not just one, but four vulnerabilities, according to a Bleeping Computer report.

➤ READ MORE: Smart bulbs: what to look for before buying

The lamp is impersonated to gain access to the wifi network

An attacker can mimic this light in the user’s WLAN. If the user wants to control the lamp, the commands come to him instead of the lamp. This gives the attacker access data for the Tapo application, which is used to control the light. He can then use this app to Wifi SSID and password User extraction. This gives it access to the WLAN and therefore access to all the devices in it.

And also from the loopholes that allow the hacker commandsThose previously sent to the lamp are duplicated. It doesn’t sound so bad, but it can be annoying when suddenly at 3am the light in the bedroom starts shining brightly.

Before publishing their study, the researchers reported the vulnerabilities to TP-Link. The company promised to fill in the gaps in Firmware and in the application for stuff. The study did not reveal whether this happened in the meantime. Bleeping Computer asked TP-Link if updates have already been released, but has not yet received an answer.