Skip to content
OpenAdvisories
Critical · 9.8 Public exploit CVE-2021-4045 EUVD-2021-33942GHSA-574v-3xxh-gwh5

TP-LINK Tapo C200 remote code execution vulnerability

Published Mar 7, 2022 · Updated Sep 17, 2024 · Assigned by INCIBE

Vendor: TP-Link Systems Product: Tapo C200 Category: Network devices

Description

TP-Link Tapo C200 IP camera, on its 1.1.15 firmware version and below, is affected by an unauthenticated RCE vulnerability, present in the uhttpd binary running by default as root. The exploitation of this vulnerability allows an attacker to take full control of the camera.

Affected products

VendorProductAffectedFixed
TP-Link Tapo C200 1.15 – ≤ 1.15 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

Exploit-DB 1

GitHub 6 repositories

  • hacefresko/CVE-2021-4045 ★ 123 · Nov 15, 2021

    Exploit for command injection vulnerability found in uhttpd binary from TP-Link Tapo c200 IP camera

  • 0xbinder/CVE-2021-4045 ★ 12 · Dec 26, 2023

    🔐 "PWNTAPO: Unveiling Command Injection in TP-Link Tapo C200 Cameras (<= v1.1.16 Build 211209)" 🔓

  • 234329a423853/CVE-2021-4045 ★ 3 · Dec 11, 2025

    CVE-2021-4045 CVE-2021-4045 is a Command Injection vulnerability that allows Remote Code Execution in the TP-Link Tapo c200 IP camera. It affects all firmware versions prior to 1.1.16 Build 211209 Re…

  • DorskFR/tapodate ★ 1 · Mar 30, 2025

    Sets up a local Tapo C200 using CVE-2021-4045

  • jeffbezosispogg/CVE-2021-4045 ★ 1 · Oct 11, 2022

    TP-Link Tapo c200 ver <1.1.15 - Remote Code Execution (RCE)

  • kaleth4/CVE-2021-4045 ★ 0 · Jun 11, 2026

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

References