452 matches found
TP-LINK Smart bulb Tapo 安全漏洞
TP-LINK Smart bulb Tapo is a smart bulb from China P&L TP-LINK. A security vulnerability exists in TP-LINK Smart bulb Tapo, which stems from a vulnerability that allows a remote attacker to obtain sensitive information via authentication code in UDP messages...
PT-2023-4543 · Tp Link · Tp-Link Tapo C100 +4
Name of the Vulnerable Software and Affected Versions: TP-Link Tapo L530 versions prior to 1.2.4 TP-Link Tapo L510E versions prior to 1.1.0 TP-Link Tapo L630 versions prior to 1.0.4 TP-Link Tapo P100 versions prior to 1.5.0 Tapo Application versions prior to 2.8.14 Description: The issue is relat...
CVE-2023-38906
TP-Link Tapo family vulnerability CVE-2023-38906 affects L530 (1.0.0–1.1.9), L510E (1.0.8), L630 (1.0.3), P100 (1.4.9), C200 (1.1.18), and Tapo App 2.8.14. Description: remote attacker can obtain sensitive information via the authentication code in UDP messages. Root cause: lack of protection for...
CVE-2023-38906
An issue in TPLink Smart Bulb Tapo series L530 1.1.9, L510E 1.0.8, L630 1.0.3, P100 1.4.9, Smart Camera Tapo series C200 1.1.18, and Tapo Application 2.8.14 allows a remote attacker to obtain sensitive information via the authentication code for the UDP message...
PT-2023-4544 · Tp Link · Tapo L530 +5
Name of the Vulnerable Software and Affected Versions: TPLink Smart Bulb Tapo series L530 versions 1.0.0 through 1.1.9 TPLink Smart Bulb Tapo series L510E version 1.0.8 TPLink Smart Bulb Tapo series L630 version 1.0.3 TPLink Smart Bulb Tapo series P100 version 1.4.9 TPLink Smart Camera Tapo serie...
PT-2023-4545 · Tp Link · Tplink Smart Bulb Tapo Series L530 +4
Name of the Vulnerable Software and Affected Versions: TP-Link Smart Bulb Tapo series L530 versions prior to 1.2.4 TP-Link Smart Bulb Tapo series L510E versions prior to 1.1.0 TP-Link Smart Bulb Tapo series L630 versions prior to 1.0.4 TP-Link Smart Bulb Tapo series P100 versions prior to 1.5.0...
The vulnerability of TP-Link Tapo C210 IP cameras’ microprogramming software lies in the lack of a password recovery mechanism, allowing attackers to circumvent security restrictions.
The vulnerability of TP-Link Tapo C210 IP cameras’ microprogramming software is related to the lack of a password recovery mechanism. Exploiting this vulnerability could allow an attacker to bypass security restrictions remotely...
TP-Link Tapo C210 Password Recovery Authentication Bypass Vulnerability
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of TP-Link Tapo C210 IP cameras. Authentication is not required to exploit this vulnerability. The specific flaw exists within the password recovery mechanism. The issue results from reliance...
The vulnerability of the AES encryption algorithm implementation in TP-Link Tapo C200 IP cameras’ microprogramming software allows a intruder to gain unauthorized access to protected information.
The vulnerability of the AES encryption algorithm implemented in TP-Link Tapo C200 IP cameras relates to the repetition of character sequences in the encrypted text due to incorrect processing of the initialization vector. Exploiting this vulnerability can allow an intruder to gain unauthorized...
CVE-2023-27126
The AES Key-IV pair used by the TP-Link TAPO C200 camera V3 EU on firmware version 1.1.22 Build 220725 is reused across all cameras. An attacker with physical access to a camera is able to extract and decrypt sensitive data containing the Wifi password and the TP-LINK account credential of the...
Design/Logic Flaw
The AES Key-IV pair used by the TP-Link TAPO C200 camera V3 EU on firmware version 1.1.22 Build 220725 is reused across all cameras. An attacker with physical access to a camera is able to extract and decrypt sensitive data containing the Wifi password and the TP-LINK account credential of the...
TP-LINK Tapo C200 安全漏洞
The TP-LINK Tapo C200 is a webcam device from China P&L TP-LINK. A security vulnerability exists in TP-LINK Tapo C200 V3 version 1.1.22 Build 220725, which originates from a vulnerability that allows an attacker with physical access to the camera to extract and decrypt sensitive data such as Wifi...
CVE-2023-27126
CVE-2023-27126 affects the TP-Link TAPO C200 camera V3 (EU) with firmware 1.1.22 Build 220725. The AES Key–IV pair is reused across all cameras, so a physical attacker can extract and decrypt sensitive data (WiFi password and TP-LINK account credential). Public details about a patch or fix are no...
PT-2023-6702 · Tp Link · Tp-Link Tapo C100
Name of the Vulnerable Software and Affected Versions: TP-Link Tapo C100 versions 1.1.15 Build 211130 Rel.15378n4555 and before Description: The issue is related to the HTTP service of the TP-Link Tapo C100 IP camera's firmware, specifically with the handling of CRLF sequences in HTTP headers. Th...
CVE-2022-37255
TP-Link Tapo C310 1.3.0 devices allow access to the RTSP video feed via credentials of User --- and Password TPL075526460603...
CVE-2022-37255
TP-Link Tapo C310 1.3.0 devices allow access to the RTSP video feed via credentials of User --- and Password TPL075526460603...
Default credentials
TP-Link Tapo C310 1.3.0 devices allow access to the RTSP video feed via credentials of User --- and Password TPL075526460603...
PT-2023-13522 · Tp Link · Tp-Link Tapo C310
Name of the Vulnerable Software and Affected Versions: TP-Link Tapo C310 version 1.3.0 Description: The issue allows access to the RTSP video feed using specific credentials, with User as --- and Password as TPL075526460603. Recommendations: For TP-Link Tapo C310 version 1.3.0, consider changing...
CVE-2022-37255
CVE-2022-37255 affects TP-Link Tapo C310 v1.3.0 (and earlier) with unauthorised RTSP video stream access when default credentials are used. The vulnerability allows access to the RTSP feed using the credentials User --- / Password TPL075526460603, as documented in multiple sources (Exploit-DB, Pa...
