Vulners
Lucene search
Tapo C310 RTSP Server 1.3.0 Unauthorized Video Stream Access
| Reporter | Title | Published | Views | Family All 11 |
|---|---|---|---|---|
 | Tapo C310 RTSP server v1.3.0 - Unauthorised Video Stream Access Vulnerability | 28 Mar 202300:00 | – | zdt |
 | TP-LINK Tapo C310 信任管理问题漏洞 | 28 Mar 202300:00 | – | cnnvd |
 | CVE-2022-37255 | 16 Apr 202300:00 | – | cve |
 | CVE-2022-37255 | 16 Apr 202300:00 | – | cvelist |
 | Tapo C310 RTSP server v1.3.0 - Unauthorised Video Stream Access | 28 Mar 202300:00 | – | exploitdb |
 | EUVD-2022-39900 | 3 Oct 202520:07 | – | euvd |
 | CVE-2022-37255 | 16 Apr 202302:15 | – | nvd |
 | CVE-2022-37255 | 16 Apr 202302:15 | – | osv |
 | Default credentials | 16 Apr 202302:15 | – | prion |
 | PT-2023-13522 · Tp Link · Tp-Link Tapo C310 | 16 Apr 202300:00 | – | ptsecurity |
10
`# Exploit Title: Tapo C310 RTSP server v1.3.0- Unauthorised Video Stream Access
# Date: 19th July 2022
# Exploit Author: dsclee1
# Vendor Homepage: tp-link.com
# Software Link: http://download.tplinkcloud.com/firmware/Tapo_C310v1_en_1.3.0_Build_220328_Rel.64283n_u_1649923652150.bin
# Version: 1.3.0
# Tested on: Linux – running on camera
# CVE : CVE-2022-37255
These Tapo cameras work via an app. There is a facility on the app to set up a “Camera Account”, which adds user details for the RTSP server. Unfortunately if you don’t set up the user details on versions 1.3.0 and below there are default login details. I sourced these from the “cet” binary on the camera.
You can gain unauthorised access to the RTSP stream using the following user details:
User: ---
Password: TPL075526460603
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
28 Mar 2023 00:00Current
7.6High risk
Vulners AI Score7.6
EPSS0.09272