CVE-2021-4045

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.1020%

EPSS Percentile27.24th

Published2022年3月10日

Last Modified2024年11月21日

Vulnerability Description

TP-Link Tapo C200 IP camera, on its 1.1.15 firmware version and below, is affected by an unauthenticated RCE vulnerability, present in the uhttpd binary running by default as root. The exploitation of this vulnerability allows an attacker to take full control of the camera.

Affected Platforms (CPE)

💻

Tp Link

Tapo C200 Firmware

<= 1.1.15

References & Advisories

🔗 http://packetstormsecurity.com/files/168472/TP-Link-Tapo-c200-1.1.15-Remote-Code-Execution.html

🔗 https://www.incibe-cert.es/en/early-warning/security-advisories/tp-link-tapo-c200-remote-code-execution-vulnerability