CVE-2021-4045

🗓️ 07 Mar 2022 21:58:20Reported by INCIBEType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 321 Views🌐 WEB

TP-Link Tapo C200 IP camera, 1.1.15 firmware and below, unauthenticated RCE vulnerability

Reporter	Title	Published	Views	Family All 28
GithubExploit	Exploit for Command Injection in Tp-Link Tapo_C200_Firmware	26 Dec 202308:20	–	githubexploit
GithubExploit	Exploit for Command Injection in Tp-Link Tapo_C200_Firmware	23 Nov 202521:12	–	githubexploit
GithubExploit	Exploit for Command Injection in Tp-Link Tapo_C200_Firmware	15 Nov 202114:48	–	githubexploit
GithubExploit	Exploit for Command Injection in Tp-Link Tapo_C200_Firmware	26 Dec 202308:20	–	githubexploit
GithubExploit	Exploit for Command Injection in Tp-Link Tapo_C200_Firmware	11 Jun 202618:05	–	githubexploit
GithubExploit	Exploit for Command Injection in Tp-Link Tapo_C200_Firmware	26 Dec 202308:20	–	githubexploit
GithubExploit	Exploit for Command Injection in Tp-Link Tapo_C200_Firmware	15 Nov 202114:48	–	githubexploit
zdt	TP-Link Tapo c200 1.1.15 - Remote Code Execution Exploit	23 Sep 202200:00	–	zdt
ATTACKERKB	CVE-2021-4045	11 Feb 202211:00	–	attackerkb
BDU FSTEC	The vulnerability of TP-Link Tapo C200’s microprogrammed software lies in the lack of measures to clean incoming data inputs, allowing a intruder to gain full control over the device.	18 May 202200:00	–	bdu_fstec

NVD

Vulners

Node

AND

tp-link tapo_c200_firmwareRange≤1.1.15

tp-link tapo_c200Match-

[
  {
    "product": "Tapo C200",
    "vendor": "TP-Link",
    "versions": [
      {
        "lessThanOrEqual": "1.15",
        "status": "affected",
        "version": "1.15",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
incibe-cert	www.incibe-cert.es/en/early-warning/security-advisories/tp-link-tapo-c200-remote-code-execution-vulnerability
packetstormsecurity	www.packetstormsecurity.com/files/168472/TP-Link-Tapo-c200-1.1.15-Remote-Code-Execution.html

Parameter	Position	Path	Description	CWE
method	request body	/	Unauthenticated RCE via POST to root path triggering set_language through ubus call injection	CWE-77
params	request body	/	Unauthenticated RCE via POST to root path triggering set_language through ubus call injection	CWE-77
language_json	request body	/	Unauthenticated RCE via POST to root path triggering set_language through ubus call injection	CWE-77

17 Jun 2026 04:18Current

9.4High risk

Vulners AI Score9.4

CVSS 3.19.8

CVSS 210

EPSS0.72376