PT-2025-52532

Name of the Vulnerable Software and Affected Versions Tapo C200 V3 affected versions not specified Description The HTTPS service on the device has a connectAP interface lacking proper authentication. An attacker on the same local network can exploit this to change the device’s Wi-Fi settings,...

TP-Link Tapo C200 安全漏洞

TP-Link Tapo C200 is a smart WiFi camera from China P&L TP-Link. A security vulnerability exists in TP-Link Tapo C200 V3, which stems from a lack of authentication on the connectAP interface, which could lead to Wi-Fi configuration modification and denial of service attacks...

PT-2025-52531

Name of the Vulnerable Software and Affected Versions Tapo C200 V3 affected versions not specified Description The device’s HTTPS server does not correctly validate the Content-Length header, leading to an integer overflow. An attacker on the same local network can send specially crafted HTTPS...

PT-2025-52533

Name of the Vulnerable Software and Affected Versions Tapo C200 V3 affected versions not specified Description A buffer overflow exists in the ONVIF XML parser. An attacker on the same local network can send specially crafted SOAP XML requests, leading to memory overflow and a device crash,...

Exploit for Command Injection in Tp-Link Tapo_C200_Firmware

CVEs A repository to group the CVEs that I have d...

EUVD-2021-13408

Malware in sbrugna...

EUVD-2020-28780

Malware in sbrugna...

EUVD-2020-28811

Malware in sbrugna...

EUVD-2022-44698

Malicious code in bioql PyPI...

CVE-2023-27126

The AES Key-IV pair used by the TP-Link TAPO C200 camera V3 EU on firmware version 1.1.22 Build 220725 is reused across all cameras. An attacker with physical access to a camera is able to extract and decrypt sensitive data containing the Wifi password and the TP-LINK account credential of the...

CVE-2023-38293

Certain software builds for the Nokia C200 and Nokia C100 Android devices contain a vulnerable, pre-installed app with a package name of com.tracfone.tfstatus versionCode='31', versionName='12' that allows local third-party apps to execute arbitrary AT commands in its context radio user via AT...

CVE-2022-41505

An access control issue on TP-LInk Tapo C200 V1 devices allows physically proximate attackers to obtain root access by connecting to the UART pins, interrupting the boot process, and setting an init=/bin/sh value...

CVE-2021-26614

iusget.cgi in IpTime C200 camera allows remote code execution. A remote attacker may send a crafted parameters to the exposed vulnerable web service interface which invokes the arbitrary shell command...

CVE-2020-7848

The EFM ipTIME C200 IP Camera is affected by a Command Injection vulnerability in /login.cgi?logout=1 script. To exploit this vulnerability, an attacker can send a GET request that executes arbitrary OS commands via cookie value...

PT-2024-12704 · Nokia +2 · Nokia C200 +3

Name of the Vulnerable Software and Affected Versions: AT&T Calypso version ATT/U318AA/U318AA:10/QP1A.190711.020/1632369780:user/release-keys Nokia C100 versions Nokia/DrakeLite 02US/DKT:12/SP1A.210812.016/02US 1 190:user/release-keys through Nokia/DrakeLite 02US/DKT:12/SP1A.210812.016/02US 1...

Nokia C100 安全漏洞

Nokia C100 is a smartphone from Nokia, Finland. A security vulnerability exists in the Nokia C100 and Nokia C200, which arises from the fact that certain software versions of the device contain a vulnerable pre-installed application com.tracfone.tfstatus that allows a local third-party applicatio...

PT-2024-12698 · Nokia · Nokia C200 +1

Name of the Vulnerable Software and Affected Versions: Nokia C200 versions with software build fingerprints Nokia/Drake 02US/DRK:12/SP1A.210812.016/02US 1 080:user/release-keys and Nokia/Drake 02US/DRK:12/SP1A.210812.016/02US 1 040:user/release-keys Nokia C100 versions with software build...

CVE-2023-38299

Various software builds for the AT&T Calypso, Nokia C100, Nokia C200, and BLU View 3 devices leak the device IMEI to a system property that can be accessed by any local app on the device without any permissions or special privileges. Google restricted third-party apps from directly obtaining...

CVE-2023-38293

CVE-2023-38293 concerns Nokia C200/C100 devices with a pre-installed com.tracfone.tfstatus app. It allows local third-party apps to inject and execute arbitrary AT commands in the radio context by exploiting two input/injection techniques via a broadcast to com.tracfone.tfstatus/.TFStatus, with n...

CVE-2023-38299

CVE-2023-38299 affects AT&T Calypso, Nokia C100, Nokia C200 and BLU View 3 devices. The issue is that certain software builds leak the device IMEI to a system property (persist.sys.imei1) accessible by any local app without permissions. A high-privilege process exposes the value, allowing indirec...