TP-LINK Tapo C200 remote code execution vulnerability

Summary

TP-Link Tapo C200 IP camera, on its 1.1.15 firmware version and below, is affected by an unauthenticated RCE vulnerability, present in the uhttpd binary running by default as root. The exploitation of this vulnerability allows an attacker to take full control of the camera.

Timeline

1. Mar 7, 2022, 9:58 PM UTCCVE published
2. Sep 23, 2022Public exploit on Exploit-DB

   EDB-51017

3. Sep 17, 2024, 2:57 AM UTCRecord last updated
4. Oct 28, 2026EPSS reached 10%

   FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

• TP-Link Tapo C200

  From 1.15 · through 1.15

References 9