TP-Link Tapo C200 IP camera, on its 1.1.15 firmware version and below, is affected by an unauthenticated RCE vulnerability, present in the uhttpd binary running by default as root. The exploitation of this vulnerability allows an attacker to take full control of the camera.
PoC: CVE-2021-4045-PoC
Exploit for command injection vulnerability found in uhttpd binary from TP-Link Tapo c200 IP camera
PoC: CVE-2021-4045
🔐 "PWNTAPO: Unveiling Command Injection in TP-Link Tapo C200 Cameras (<= v1.1.16 Build 211209)" 🔓
PoC: CVE-2021-4045
CVE-2021-4045 CVE-2021-4045 is a Command Injection vulnerability that allows Remote Code Execution in the TP-Link Tapo c200 IP camera. It affects all firmware versions prior to 1.1.16 Build 211209 Rel. 37726N due to insufficient checks on user input in uhttpd, which is one of the main binaries of the device.
PoC: tapodate
Sets up a local Tapo C200 using CVE-2021-4045
PoC: CVE-2021-4045
TP-Link Tapo c200 ver <1.1.15 - Remote Code Execution (RCE)
PoC: CVE-2021-4045
TP-Link Tapo c200 ver <1.1.15 - Remote Code Execution (RCE)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Get alerted for CVEs like this
Register your stack and get notified within minutes when a matching CVE drops.
Start monitoring free