Tp-link Tapo_c200

10 CVEs affecting Tp-link Tapo_c200. Latest disclosed: 2026-06-24. Critical: 1, High: 2.

Top CVEs affecting Tp-link Tapo_c200
CVESeverityScorePublishedSummary
CVE-2021-4045Critical9.82022-03-10TP-Link Tapo C200 IP camera, on its 1.1.15 firmware version and below, is affected by an unauthenticated RCE vulnerability, present in the uhttpd binary runnin…
CVE-2025-14300High8.12025-12-20The HTTPS service on Tapo C200 V3 exposes a connectAP interface without proper authentication. An unauthenticated attacker on the same local network segment ca…
CVE-2023-27098High7.52024-01-09TP-Link Tapo APK up to v2.12.703 uses hardcoded credentials for access to the login panel.
CVE-2026-12760Medium6.52026-06-24A denial-of-service (DoS) vulnerability has been identified in Tapo C200 v3 in the network packet handling logic due to improper handling of IPv4 fragmented pa…
CVE-2026-1871Medium6.52026-06-02TP-Link Tapo C200 v5 contains a stack-based buffer overflow flaw in RTSP authentication handling due to improper validation of Authorization header field lengt…
CVE-2025-8065Medium6.52025-12-20A stack-based buffer overflow vulnerability was identified in the ONVIF SOAP XML Parser in Tapo C200 v3 and C520WS v2.6. When processing XML tags with namespac…
CVE-2025-14299Medium6.52025-12-20The HTTPS server on Tapo C200 V3 does not properly validate the Content-Length header, which can lead to an integer overflow. An unauthenticated attacker on th…
CVE-2020-11445Medium5.32020-04-01TP-Link cloud cameras through 2020-02-09 allow remote attackers to bypass authentication and obtain sensitive information via vectors involving a Wi-Fi session…
CVE-2023-49515Medium4.62024-01-17Insecure Permissiosn vulnerability in TP Link TC70 and C200 WIFI Camera v.3 firmware v.1.3.4 and fixed in v.1.3.11 allows a physically proximate attacker to ob…
CVE-2023-27126Medium4.62023-06-06The AES Key-IV pair used by the TP-Link TAPO C200 camera V3 (EU) on firmware version 1.1.22 Build 220725 is reused across all cameras. An attacker with physica…