Skip to content
OpenAdvisories

Product · TP-Link Systems

Tapo C200

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2025-14300

    Unauthenticated Access to connectAP API Endpoint on Tapo C100, C200 & C425

    The HTTPS service on Tapo C200 v3, v5, C425 v1.2 and C100 v5  exposes a connectAP interface without proper authentication. An unauthenticated attacker on the same local network segment can exploit this to modify the device’s Wi-Fi configuration, resulting in …

    TP-Link Systems Tapo C100 v5 Tapo C200 Tapo C425 v1.2 Network devices