7.1

CVE-2026-1871

Authenticated Stack-based Buffer Overflow in RTSP Authentication of Tapo C200

TP-Link Tapo C200 v5 contains a stack-based buffer overflow flaw in RTSP authentication handling due to improper validation of Authorization header field lengths, which can be triggered by a crafted authentication request.

Successful exploitation causes the affected RTSP core service process to crash and triggers an automatic system reboot, resulting in a denial of service (DoS) condition.  This prevents legitimate users from accessing the camera’s live video stream or management interface until the service restarts.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Tp-link ≫ Tapo C200 Firmware Version1.0.5 Updatebuild_240327
   Tp-link ≫ Tapo C200 Version5
Tp-link ≫ Tapo C200 Firmware Version1.0.12 Updatebuild_240527
   Tp-link ≫ Tapo C200 Version5
Tp-link ≫ Tapo C200 Firmware Version1.0.13 Updatebuild_240619
   Tp-link ≫ Tapo C200 Version5
Tp-link ≫ Tapo C200 Firmware Version1.0.17 Updatebuild_240806
   Tp-link ≫ Tapo C200 Version5
Tp-link ≫ Tapo C200 Firmware Version1.1.4 Updatebuild_241219
   Tp-link ≫ Tapo C200 Version5
Tp-link ≫ Tapo C200 Firmware Version1.1.8 Updatebuild_250310
   Tp-link ≫ Tapo C200 Version5
Tp-link ≫ Tapo C200 Firmware Version1.2.3 Updatebuild_250610
   Tp-link ≫ Tapo C200 Version5
Tp-link ≫ Tapo C200 Firmware Version1.3.1 Updatebuild_250910
   Tp-link ≫ Tapo C200 Version5
Tp-link ≫ Tapo C200 Firmware Version1.3.3 Updatebuild_251119
   Tp-link ≫ Tapo C200 Version5
Tp-link ≫ Tapo C200 Firmware Version1.3.5 Updatebuild_260228
   Tp-link ≫ Tapo C200 Version5
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.31% 0.219
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
f23511db-6c3e-4e32-a477-6aa17d310630 7.1 0 0
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE-121 Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

https://www.tp-link.com/us/support/download/tapo-c200/v5/#Firmware-Release-Notes
Release Notes
https://www.tp-link.com/en/support/download/tapo-c200/v5/#Firmware-Release-Notes
Release Notes
https://www.tp-link.com/kr/support/download/tapo-c200/#Firmware-Release-Notes
Release Notes
https://www.tp-link.com/us/support/faq/5113/
Vendor Advisory