The vulnerability of the HTTP-based microprogramming software service of TP-Link Tapo C100 allows a intruder to trigger a service failure.

The vulnerability of the HTTP-based microprogramming software for TP-Link Tapo C100 lies in the lack of measures taken to handle CRLF sequences in HTTP headers. Exploiting this vulnerability allows a remote attacker to cause service failures by sending specially crafted HTTP requests...