TP-Link Tapo c200 Firmware

TP-LINK Tapo C200 remote code execution vulnerability

Unauthenticated Administrative Authentication Bypass via device_confirm Replay in TP-Link Tapo C200

Remote Code Execution via Stack-based Buffer Overflow in ONVIF SOAP Parser in TP-Link Tapo C200 and C520WS

Unauthenticated Access to connectAP API Endpoint on Tapo C100, C200 & C425

Denial-of-Service Vulnerability via Malformed IPv4 Fragmentation Handling in TP-Link Tapo C200

Authenticated Stack-based Buffer Overflow in RTSP Authentication of Tapo C200

Improper Content-Length Validation in HTTPS Requests on Tapo C200

Denial-of-Service via Oversized Encrypted Credential Input in TP-Link Tapo C200

TP-Link cloud cameras through 2020-02-09 allow remote attackers to bypass authentication and obtain sensitive information via vectors involving a Wi-Fi session with GPS enabled, aka CNVD-2020-04855.

Insecure Permissiosn vulnerability in TP Link TC70 and C200 WIFI Camera v.3 firmware v.1.3.4 and fixed in v.1.3.11 allows a physically proximate attacker to obtain sensitive information via a connection to the UART pin components.

The AES Key-IV pair used by the TP-Link TAPO C200 camera V3 (EU) on firmware version 1.1.22 Build 220725 is reused across all cameras. An attacker with physical access to a camera is able to extract and decrypt sensitive data containing the Wifi password and the TP-LINK account credential of the victim.