Tapo C520ws Firmware vulnerabilities
4 known vulnerabilities in Tapo C520ws Firmware from TP-Link. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Tapo C520WS v2.6: Improper Authentication
An authentication bypass vulnerability within the HTTP handling of the DS configuration service in TP-Link Tapo C520WS v2.6 and C210 v3 was identified, due to inconsistent parsing and authorization logic in JSON requests during authentication check. An unauthe
- 7.5 High severity
By sending crafted files to the firmware update endpoint of Tapo C220 v1 and C520WS v2, the…
By sending crafted files to the firmware update endpoint of Tapo C220 v1 and C520WS v2, the device terminates core system services before verifying authentication or firmware integrity. An unauthenticated attacker can trigger a persistent denial of service, re
- 7.5 High severity
The HTTP parser of Tapo C210 v3, C220 v1 and C520WS v2 cameras improperly handles requests…
The HTTP parser of Tapo C210 v3, C220 v1 and C520WS v2 cameras improperly handles requests containing an excessively long URL path. An invalid‑URL error path continues into cleanup code that assumes allocated buffers exist, leading to a crash and service resta
- 7.5 High severity
Tapo C220 v1: NULL Pointer Dereference
The Tapo C100 v5, C220 v1 and C520WS v2 cameras’ HTTP service does not safely handle POST requests containing an excessively large Content-Length header. The resulting failed memory allocation triggers a NULL pointer dereference, causing the main service proce