CVE-2021-4045

CVE-2021-4045 CVE-2021-4045는 TP-Link Tapo c200 IP 카메라에서 원격 코드 실행을 가능하게 하는 명령 주입 취약점입니다. 이 취약점은 장치의 주요 바이너리 중 하나인 uhttpd에서 사용자 입력에 대한 충분한 검사가 이루어지지 않아 펌웨어 버전 1.1.16 Build 211209 Rel. 37726N 이전의 모든 버전에 영향을 미칩니다. 전체 분석 내용은 여기에서 확인할 수 있습니다. 익스플로잇 pwnTapo.py 이것은 CryptoParty Madrid 2022에서 취약점을 시연하기 위해...

CVE-2021-4045

エクスプロイトタイトル: TP-LINK Tapo c200 1.1.15 - RCE ベンダー: https://www.tp-link.com/en/home-networking/cloud-camera/tapo-c200/ バージョン: 1.1.15 以下 CVE: CVE-2021-4045 ロード可能な C2 ボットネット & massexploit 脆弱性の解説: https://www.hacefresko.com/posts/tp-link-tapo-c200-unauthenticated-rce...

CVE-2026-15315

cve-id 寄付 このプロジェクトの維持を支援する このプロジェクトが役立つと思われた方は、PayPal または ABA Mobile を通じて、継続的な維持管理へのご支援をご検討ください。 ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ ご寄付の10%は、Kantha Bopha Children's Hospital に寄付されます。 | 支払い方法を選択 ABA Mobile でスキャン · クリックで拡大 ---|--- ⚡ 簡単な使い方 GitHub...

CVE-2021-4045

TP-Link Tapo c200 1.1.15 - 원격 코드 실행 RCE CVE-2021-4045 🔐 "PWNTAPO: TP-Link Tapo C200 카메라 = v1.1.16 Build 211209의 명령 인젝션 공개" 🔓 익스플로잇에 대한 내용은 exploit db에서 확인하세요. 이 취약점은 모든 TP-Link Tapo c200 카메라 펌웨어 버전 1.1.16 Build 211209 Rel. 37726N에 영향을 미치는 명령 인젝션 취약점입니다. 익스플로잇 작동 방식에 대해 더 알아보려면 hacefresko의 글을 읽어보세...

CVE-2021-4045

🔍 CVE-2021-4045: TP-Link Tapo C200 명령 주입 취약점 CVE-2021-4045 📌 요약 CVE-2021-4045 는 TP-Link Tapo C200 카메라에서 발견된 명령 주입 취약점으로, 공격자가 root 권한으로 장치를 완전히 제어할 수 있습니다. 이 취약점은 펌웨어 버전 1.1.16 Build 211209 Rel. 37726N 이전의 모든 버전 에 영향을 미칩니다. 🔗 INCIBE 공식 공지 :...

CVE-2026-75619

TP-Link Tapo C100/C101 V5 contains a heap-based buffer overflow in the RTSP service . An authenticated attacker on the local network can send specially crafted RTSP frame data containing oversized length values, causing out-of-bounds heap writes. Successful exploitation crashes the RTSP service a...

CVE-2026-75618 RTSP Null Pointer Dereference Denial-of-Service Vulnerability on TP-Link Tapo C100 and C101

Tapo C100/C101 V5 contains a null pointer dereference vulnerability in the RTSP service. An attacker on the local network can send specially crafted requests that cause the service to dereference an invalid pointer, resulting in a service crash and device reboot. Successful exploitation can disru...

CVE-2026-15316

The Tapo C200 v5 configuration service lacks validation on encrypted credential ciphertext length, allowing an attacker on the local network to crash or restart the device by sending oversized values, temporarily disrupting HTTPS management and monitoring. CVSS 7.1 (HIGH), network-adjacent, no au...

CVE-2026-15315 Unauthenticated Administrative Authentication Bypass via device_confirm Replay in TP-Link Tapo C120 and C200

Tapo C120 v1 and C200 v5 contain an improper authentication vulnerability within the login authentication verification module. An attacker on the local network can exploit weaknesses in challenge parameter validation to bypass normal authentication controls and obtain administrative session token...

CVE-2026-15314 Authenticated Denial-of-Service Vulnerability in TP-Link Tapo P110

Tapo P110 v1 smart Wi-Fi Plug contains an improper boundary validation vulnerability in the handling of authenticated HTTP request bodies due to insufficient input validation before memory copy operations. This may lead to buffer overflow condition, causing the web service process to crash...

CVE-2026-8714: Improper Input Validation

A denial-of-service vulnerability exists in the RTSP server component of TP-Link Tapo C520WS v2 due to improper handling of syntactically invalid input. Crafted inputs can trigger a processing error, causing the RTSP service to enter non-responsive state. Successful exploitation may cause the RTS...

CVE-2026-1871: Stack-based Buffer Overflow

TP-Link Tapo C200 v5 contains a stack-based buffer overflow flaw in RTSP authentication handling due to improper validation of Authorization header field lengths, which can be triggered by a crafted authentication request. Successful exploitation causes the affected RTSP core service process to...

CVE-2026-34118

A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 in the HTTP POST body parsing logic due to missing validation of remaining buffer capacity after dynamic allocation, due to insufficient boundary validation when handling externally supplied HTTP input. An...

CVE-2026-34121

An authentication bypass vulnerability within the HTTP handling of the DS configuration service in TP-Link Tapo C520WS v2.6 was identified, due to inconsistent parsing and authorization logic in JSON requests during authentication check. An unauthenticated attacker can append an...

CVE-2026-34119

A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 within the HTTP parsing loop when appending segmented request bodies without continuous write‑boundary verification, due to insufficient boundary validation when handling externally supplied HTTP input. An...

EUVD-2026-18426

A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 in the HTTP POST body parsing logic due to missing validation of remaining buffer capacity after dynamic allocation, due to insufficient boundary validation when handling externally supplied HTTP input. An...

CVE-2026-34119

A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 within the HTTP parsing loop when appending segmented request bodies without continuous write‑boundary verification, due to insufficient boundary validation when handling externally supplied HTTP input. An...

CVE-2026-34121 Authentication Bypass in DS Configuration Service via HTTP Request Parsing Differential of TP-Link Tapo C520WS

An authentication bypass vulnerability within the HTTP handling of the DS configuration service in TP-Link Tapo C520WS v2.6 was identified, due to inconsistent parsing and authorization logic in JSON requests during authentication check. An unauthenticated attacker can append an...

CVE-2026-34120 Heap-based Buffer Overflow Vulnerability Leading to Denial-of-Service in TP-Link Tapo C520WS

A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 within the asynchronous parsing of local video stream content due to insufficient alignment and validation of buffer boundaries when processing streaming inputs.An attacker on the same network segment could...

CVE-2026-34120

A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 within the asynchronous parsing of local video stream content due to insufficient alignment and validation of buffer boundaries when processing streaming inputs.An attacker on the same network segment could...