Tapo C520WS v2 vulnerabilities
4 known vulnerabilities in Tapo C520WS v2 from TP-Link. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.0 High severity
Tapo C520WS v2: Improper Authentication
On Tapo C520WS v2, restricted accounts (for example, hub users) are intended to execute only a limited set of low‑sensitivity operations. Due to a logic flaw in the device’s API authorization mechanism, an attacker can craft requests that leverage legitimate “
- 7.5 High severity
By sending crafted files to the firmware update endpoint of Tapo C220 v1 and C520WS v2, the…
By sending crafted files to the firmware update endpoint of Tapo C220 v1 and C520WS v2, the device terminates core system services before verifying authentication or firmware integrity. An unauthenticated attacker can trigger a persistent denial of service, re
- 7.5 High severity
The HTTP parser of Tapo C210 v3, C220 v1 and C520WS v2 cameras improperly handles requests…
The HTTP parser of Tapo C210 v3, C220 v1 and C520WS v2 cameras improperly handles requests containing an excessively long URL path. An invalid‑URL error path continues into cleanup code that assumes allocated buffers exist, leading to a crash and service resta
- 7.5 High severity
Tapo C220 v1: NULL Pointer Dereference
The Tapo C100 v5, C220 v1 and C520WS v2 cameras’ HTTP service does not safely handle POST requests containing an excessively large Content-Length header. The resulting failed memory allocation triggers a NULL pointer dereference, causing the main service proce