6.5

CVE-2025-14299

Medienbericht

Improper Content-Length Validation in HTTPS Requests on Tapo C200

The HTTPS server on Tapo C200 V3 does not properly validate the Content-Length header, which can lead to an integer overflow. An unauthenticated attacker on the same local network segment can send crafted HTTPS requests to trigger excessive memory allocation, causing the device to crash and resulting in denial-of-service (DoS).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Tp-link ≫ Tapo C200 Firmware Version 1.3.3 Update build_230228
   Tp-link ≫ Tapo C200 Version 3
Tp-link ≫ Tapo C200 Firmware Version 1.3.4 Update build_230424
   Tp-link ≫ Tapo C200 Version 3
Tp-link ≫ Tapo C200 Firmware Version 1.3.5 Update build_230717
   Tp-link ≫ Tapo C200 Version 3
Tp-link ≫ Tapo C200 Firmware Version 1.3.7 Update build_230920
   Tp-link ≫ Tapo C200 Version 3
Tp-link ≫ Tapo C200 Firmware Version 1.3.9 Update build_231019
   Tp-link ≫ Tapo C200 Version 3
Tp-link ≫ Tapo C200 Firmware Version 1.3.11 Update build_231115
   Tp-link ≫ Tapo C200 Version 3
Tp-link ≫ Tapo C200 Firmware Version 1.3.13 Update build_240327
   Tp-link ≫ Tapo C200 Version 3
Tp-link ≫ Tapo C200 Firmware Version 1.3.14 Update build_240513
   Tp-link ≫ Tapo C200 Version 3
Tp-link ≫ Tapo C200 Firmware Version 1.3.15 Update build_240715
   Tp-link ≫ Tapo C200 Version 3
Tp-link ≫ Tapo C200 Firmware Version 1.4.1 Update build_241212
   Tp-link ≫ Tapo C200 Version 3
Tp-link ≫ Tapo C200 Firmware Version 1.4.2 Update build_250313
   Tp-link ≫ Tapo C200 Version 3
Tp-link ≫ Tapo C200 Firmware Version 1.4.4 Update build_250922
   Tp-link ≫ Tapo C200 Version 3
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.25% 0.161
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
f23511db-6c3e-4e32-a477-6aa17d310630 7.1 0 0
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

CWE-770 Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
22.12.2025 10:34
https://www.tp-link.com/us/support/download/tapo-c200/v3/#Firmware-Release-Notes
Release Notes
https://www.tp-link.com/us/support/faq/4849/
Vendor Advisory