Advisories · Technology
TP-Link Systems Inc. Tapo C200 v5.
Every CVE that names TP-Link Systems Inc. Tapo C200 v5 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
Unauthenticated Remote Code Execution via MacTool Command Injection in TP-Link Tapo C120 & C200
- TP-Link Systems Inc. Tapo C200 v5
- TP-Link Systems Inc. Tapo C120 v1
- Authentication bypass
- CVSS 7.1 High
Unauthenticated do Method Onboarding Connect Allows Wi‑Fi Reconfiguration Denial of Service Vulnerability in TP-Link Tapo C120 & C200
- TP-Link Systems Inc. Tapo C200 v5
- TP-Link Systems Inc. Tapo C120 v1
- Authentication bypass
- CVSS 5.3 Medium
Unauthenticated Onboarding Scan Information Disclosure in TP-Link Tapo C120 & C200
- TP-Link Systems Inc. Tapo C200 v5
- TP-Link Systems Inc. Tapo C120 v1
- Authentication bypass
- CVSS 7.1 High
Unauthenticated Onboarding Connect NULL Pointer Dereference Denial of Service Vulnerability in TP-Link Tapo C120 & C200
- TP-Link Systems Inc. Tapo C200 V5
- TP-Link Systems Inc. Tapo C120 V1
- Memory corruption
- CVSS 7.1 High
Denial-of-Service via Oversized Encrypted Credential Input in TP-Link Tapo C200
- TP-Link Systems Inc. Tapo C200 v5
- CWE-20
- CVSS 8.7 High
Unauthenticated Administrative Authentication Bypass via device_confirm Replay in TP-Link Tapo C120 and C200
- TP-Link Systems Inc. Tapo C200 v5
- TP-Link Systems Inc Tapo C120 v1
- Authentication bypass
- CVSS 7.1 High
Authenticated Stack-based Buffer Overflow in RTSP Authentication of Tapo C200
- TP-Link Systems Inc. Tapo C200 v5
- Memory corruption