Description
The HTTPS service on Tapo C200 v3, v5, C425 v1.2 and C100 v5 exposes a connectAP interface without proper authentication. An unauthenticated attacker on the same local network segment can exploit this to modify the device’s Wi-Fi configuration, resulting in loss of connectivity and denial-of-service (DoS).
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
TP-Link Systems Inc. Tapo C200
Default version status: unaffected
0 to < V3_1.4.5 Build 251104affected0 to < V5_1.4.6 Build 260709 Rel.27675naffected
TP Link Systems Inc. Tapo C100 v5
Default version status: unaffected
0 to < V5_1.4.4 Build 260303affected
TP Link Systems Inc. Tapo C425 v1.2
Default version status: unaffected
0 to < V1.20_1.2.27 Build 260518affected
References
- https://www.tp-link.com/us/support/download/tapo-c200/v3/#Firmware-Release-Notes ↗
- https://www.tp-link.com/us/support/faq/4849/ ↗
- https://www.tp-link.com/en/support/download/tapo-c100/v5/#Firmware-Release-Notes ↗
- https://www.tp-link.com/us/support/download/tapo-c100/v5/#Firmware-Release-Notes ↗
- https://www.tp-link.com/en/support/download/tapo-c200/v3/#Firmware-Release-Notes ↗
- https://www.tp-link.com/us/support/download/tapo-c425/v1.20/#Firmware-Release-Notes ↗
- https://www.tp-link.com/en/support/download/tapo-c425/v1.20/#Firmware-Release-Notes ↗
- https://www.tp-link.com/us/support/download/tapo-c200/v5/#Firmware-Release-Notes ↗
- https://www.tp-link.com/en/support/download/tapo-c200/v5/#Firmware-Release-Notes ↗