6.5

CVE-2026-1871

Authenticated Stack-based Buffer Overflow in RTSP Authentication of Tapo C200

TP-Link Tapo C200 v5 contains a stack-based buffer overflow flaw in RTSP authentication handling due to improper validation of Authorization header field lengths, which can be triggered by a crafted authentication request.

Successful exploitation causes the affected RTSP core service process to crash and triggers an automatic system reboot, resulting in a denial of service (DoS) condition.  This prevents legitimate users from accessing the camera’s live video stream or management interface until the service restarts.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Tp-link ≫ Tapo C200 Firmware Version 1.0.5 Update build_240327
   Tp-link ≫ Tapo C200 Version 5
Tp-link ≫ Tapo C200 Firmware Version 1.0.12 Update build_240527
   Tp-link ≫ Tapo C200 Version 5
Tp-link ≫ Tapo C200 Firmware Version 1.0.13 Update build_240619
   Tp-link ≫ Tapo C200 Version 5
Tp-link ≫ Tapo C200 Firmware Version 1.0.17 Update build_240806
   Tp-link ≫ Tapo C200 Version 5
Tp-link ≫ Tapo C200 Firmware Version 1.1.4 Update build_241219
   Tp-link ≫ Tapo C200 Version 5
Tp-link ≫ Tapo C200 Firmware Version 1.1.8 Update build_250310
   Tp-link ≫ Tapo C200 Version 5
Tp-link ≫ Tapo C200 Firmware Version 1.2.3 Update build_250610
   Tp-link ≫ Tapo C200 Version 5
Tp-link ≫ Tapo C200 Firmware Version 1.3.1 Update build_250910
   Tp-link ≫ Tapo C200 Version 5
Tp-link ≫ Tapo C200 Firmware Version 1.3.3 Update build_251119
   Tp-link ≫ Tapo C200 Version 5
Tp-link ≫ Tapo C200 Firmware Version 1.3.5 Update build_260228
   Tp-link ≫ Tapo C200 Version 5
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.31% 0.219
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
f23511db-6c3e-4e32-a477-6aa17d310630 7.1 0 0
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE-121 Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

https://www.tp-link.com/us/support/faq/5113/
Vendor Advisory
https://www.tp-link.com/en/support/download/tapo-c200/v5/#Firmware-Release-Notes
Release Notes
https://www.tp-link.com/kr/support/download/tapo-c200/#Firmware-Release-Notes
Release Notes
https://www.tp-link.com/us/support/download/tapo-c200/v5/#Firmware-Release-Notes
Release Notes