CyberSecBulletin
CVE-2026-0629NVD status: Deferred

VIGI InSight Sx45 Series (S245/S345/S445): Improper Authentication

Published Updated By the CyberSecBulletin desk

CVE-2026-0629 is a high-severity improper authentication vulnerability in VIGI InSight Sx45 Series (S245/S345/S445) from TP-Link, with a CVSS 4.0 base score of 8.7 out of 10. It can be exploited from the same local network by an unauthenticated attacker, without any action from a user. The record lists version 3.1.0_Build_250820_Rel.57668n as the first without the flaw, so updating VIGI InSight Sx45 Series (S245/S345/S445) to that release or later removes the exposure. There is no confirmed exploitation so far. EPSS estimates a 0.42% chance of exploitation within 30 days, which is low compared with other CVEs.

Next patch cycle

High severity with no evidence of exploitation so far.

What to do

  1. Update VIGI InSight Sx45 Series (S245/S345/S445) to 3.1.0_Build_250820_Rel.57668n or a later version.
  2. Update VIGI Cx45 Series (C345/C445) to 3.1.0_Build_250820_Rel.57668n or a later version.
  3. Update VIGI InSight Sx55 Series (S355/S455) to 3.1.0_Build_250820_Rel.58873n or a later version.

Affected products and versions

VendorProductAffected versionsFixed in
TP-LinkVIGI InSight Sx45 Series (S245/S345/S445)before 3.1.0_Build_250820_Rel.57668n3.1.0_Build_250820_Rel.57668n
TP-LinkVIGI Cx45 Series (C345/C445)before 3.1.0_Build_250820_Rel.57668n3.1.0_Build_250820_Rel.57668n
TP-LinkVIGI InSight Sx55 Series (S355/S455)before 3.1.0_Build_250820_Rel.58873n3.1.0_Build_250820_Rel.58873n
TP-LinkVIGI Cx55 Series (C355/C455)before 3.1.0_Build_250820_Rel.58873n3.1.0_Build_250820_Rel.58873n
TP-LinkVIGI InSight Sx85 Series (S285/S385)before 3.0.2_Build_250630_Rel.71279n3.0.2_Build_250630_Rel.71279n
TP-LinkVIGI Cx85 Series (C385/C485)before 3.0.2_Build_250630_Rel.71279n3.0.2_Build_250630_Rel.71279n
TP-LinkVIGI InSight S655Ibefore 1.1.1_Build_250625_Rel.64224n1.1.1_Build_250625_Rel.64224n
TP-LinkVIGI InSight Sx45ZI Series (S245ZI/S345ZI/S445ZI)before 1.2.0_Build_250820_Rel.60930n1.2.0_Build_250820_Rel.60930n
TP-LinkVIGI InSight Sx85PI Series (S385PI/S485PI)before 1.2.0_Build_250827_Rel.66817n1.2.0_Build_250827_Rel.66817n
TP-LinkVIGI C340Sbefore 3.1.0_Build_250625_Rel.65381n3.1.0_Build_250625_Rel.65381n
TP-LinkVIGI C540S / EasyCam C540Sbefore 3.1.0_Build_250625_Rel.66601n3.1.0_Build_250625_Rel.66601n
TP-LinkVIGI C540Vbefore 2.1.0_Build_250702_Rel.54300n2.1.0_Build_250702_Rel.54300n
TP-LinkVIGI C250before 2.1.0_Build_250702_Rel.54301n2.1.0_Build_250702_Rel.54301n
TP-LinkVIGI Cx50 Series (C350/C450)before 2.1.0_Build_250702_Rel.54294n2.1.0_Build_250702_Rel.54294n
TP-LinkVIGI Cx20I 1.0 Series (C220I 1.0/C320I 1.0/C420I 1.0)before 2.1.0_Build_251014_Rel.58331n2.1.0_Build_251014_Rel.58331n
TP-LinkVIGI Cx20I 1.20 Series (C220I 1.20/C320I 1.20/C420I 1.20)before 2.1.0_Build_250701_Rel.44071n2.1.0_Build_250701_Rel.44071n
TP-LinkVIGI Cx30I 1.0 Series (C230I 1.0/C330I 1.0/C430I 1.0)before 2.1.0_Build_250701_Rel.45506n2.1.0_Build_250701_Rel.45506n
TP-LinkVIGI Cx30I 1.20 Series (C230I 1.20/C330I 1.20/C430I 1.20)before 2.1.0_Build_250701_Rel.44555n2.1.0_Build_250701_Rel.44555n
TP-LinkVIGI Cx40I 1.0 Series (C240I 1.0/C340I 1.0/C440I 1.0)before 2.1.0_Build_250701_Rel.46003n2.1.0_Build_250701_Rel.46003n
TP-LinkVIGI Cx40I 1.20 Series (C240I 1.20/C340I 1.20/C440I 1.20)before 2.1.0_Build_250701_Rel.45041n2.1.0_Build_250701_Rel.45041n
TP-LinkVIGI Cx30 1.0 Series (C230 1.0/C330 1.0/C430 1.0)before 2.1.0_Build_250701_Rel.46796n2.1.0_Build_250701_Rel.46796n
TP-LinkVIGI Cx30 1.20 Series (C230 1.20/C330 1.20/C430 1.20)before 2.1.0_Build_250701_Rel.46796n2.1.0_Build_250701_Rel.46796n
TP-LinkVIGI C230I Minibefore 2.1.0_Build_250701_Rel.47570n2.1.0_Build_250701_Rel.47570n
TP-LinkVIGI C240 1.0before 2.1.0_Build_250701_Rel.48425n2.1.0_Build_250701_Rel.48425n
TP-LinkVIGI C340 2.0before 2.1.0_Build_250701_Rel.49304n2.1.0_Build_250701_Rel.49304n

Version data comes from the organisation that assigned the CVE; 9 further products are omitted here. Confirm against the vendor advisory before deciding you are unaffected.

How the severity score breaks down

Attack vector
AdjacentThe attacker must be on the same local network segment.
Attack complexity
LowNo special conditions are needed; the attack works reliably.
Attack requirements
NoneThe attack does not depend on a particular deployment or configuration.
Privileges required
NoneNo account or login is needed.
User interaction
NoneNo action by a victim is required.
Confidentiality (vulnerable system)
HighSerious loss of confidentiality on the vulnerable system.
Integrity (vulnerable system)
HighSerious loss of integrity on the vulnerable system.
Availability (vulnerable system)
HighSerious loss of availability on the vulnerable system.
Confidentiality (other systems)
NoneNo loss of confidentiality on systems beyond the vulnerable one.
Integrity (other systems)
NoneNo loss of integrity on systems beyond the vulnerable one.
Availability (other systems)
NoneNo loss of availability on systems beyond the vulnerable one.

Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. Scored by CNA.

Official description

Authentication bypass in the password recovery feature of the local web interface across multiple VIGI camera models allows an attacker on the LAN to reset the admin password without verification by manipulating client-side state. Attackers can gain full administrative access to the device, compromising configuration and network security.

Source: the CVE record as published by its numbering authority, via NVD and CVE.org.

The underlying weakness: Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

How developers prevent this class of flaw

  • Use an authentication framework or library such as the OWASP ESAPI Authentication feature.

More Improper Authentication vulnerabilities (CWE-287)

Timeline

  1. CVE record published.
  2. CISA published its SSVC assessment (exploitation: none, automatable: no, technical impact: total).
  3. Record last changed materially (score, affected products, status or references).

References

Recent Improper Authentication vulnerabilities

Spotted an error? Tell us.