Description
The HTTPS service on Tapo C200 v3, v5, C425 v1.2 and C100 v5 exposes a connectAP interface without proper authentication. An unauthenticated attacker on the same local network segment can exploit this to modify the device’s Wi-Fi configuration, resulting in loss of connectivity and denial-of-service (DoS).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TP-Link Systems | Tapo C200 | < V3_1.4.5 Build 251104, < V5_1.4.6 Build 260709 Rel.27675n | V3_1.4.5 Build 251104 |
| TP Link Systems | Tapo C100 v5 | < V5_1.4.4 Build 260303 | V5_1.4.4 Build 260303 |
| TP Link Systems | Tapo C425 v1.2 | < V1.20_1.2.27 Build 260518 | V1.20_1.2.27 Build 260518 |
References
- https://www.tp-link.com/us/support/download/tapo-c200/v3/#Firmware-Release-Notes patch
- https://www.tp-link.com/us/support/faq/4849/ vendor-advisory
- https://www.tp-link.com/en/support/download/tapo-c100/v5/#Firmware-Release-Notes patch
- https://www.tp-link.com/us/support/download/tapo-c100/v5/#Firmware-Release-Notes patch
- https://www.tp-link.com/en/support/download/tapo-c200/v3/#Firmware-Release-Notes patch
- https://www.tp-link.com/us/support/download/tapo-c425/v1.20/#Firmware-Release-Notes patch
- https://www.tp-link.com/en/support/download/tapo-c425/v1.20/#Firmware-Release-Notes patch
- https://www.tp-link.com/us/support/download/tapo-c200/v5/#Firmware-Release-Notes patch
- https://www.tp-link.com/en/support/download/tapo-c200/v5/#Firmware-Release-Notes patch