TP-Link Tapo c200 Camera Unauthenticated RCE (CVE-2021-4045) - hacefresko

Hello there. Today I would like to share with you my first CVE, which corresponds to a command injection vulnerability found a couple months ago in the TP-Link Tapo c200 camera, that allows an attacker to take full control of the device with root privileges. It was assigned CVE-2021-4045 by the INCIBE, and you can check the official advisory here. The vulnerability affects all firmware versions prior to 1.1.16 Build 211209 Rel. 37726N, so if you own this model, I suggest you update it.

TP-Link Tapo c200 Camera Unauthenticated RCE (CVE-2021-4045) - hacefresko

Tapo C200, Pan/Tilt Home Security Wi-Fi Camera

Fans0n (@00mask1) / X

Joşé Mąríą A. on LinkedIn: TP-Link Tapo c200 Camera Unauthenticated RCE (CVE -4045-2021)

TP-Link Tapo c200 Camera Unauthenticated RCE (CVE-2021-4045) - hacefresko

Hacking into Wi-Fi Camera TP-Link Tapo C200 (CVE-2021–4045), by LeoX

TP-Link Tapo c200 Camera Unauthenticated RCE (CVE-2021-4045) - hacefresko

TP-Link Tapo C200 Pan Tilt Home Security WiFi Camera 1080P 2-Way Audio TPLink

TP-Link Tapo c200 Camera Unauthenticated RCE (CVE-2021-4045) - hacefresko

GitHub - soosmile/POC

TP-Link Tapo Pan/Tilt Security Camera for Baby Monitor, Pet Camera w/ Motion Detection, 1080P, 2-Way Audio, Night Vision, Cloud & SD Card Storage, Works with Alexa & Google Home (Tapo

SAVE UP VALUABLE DESKTOP SPACE - Mount Tapo C210/C200 on the wall or at the corner top to get better wider view HIGH QUALITY ACRYLIC - We choose

Wall Mount for TP-Link Tapo C210 2K Pan Tilt Security Camera and TP-Link Tapo C200

GitHub - NoDataFound/hackGPT: I leverage OpenAI and ChatGPT to do hackerish things

TP-Link Tapo Pan/Tilt Security Camera for Baby Monitor, Pet Camera w/ Motion Detection, 1080P, 2-Way Audio, Night Vision, Cloud & SD Card Storage, Works with Alexa & Google Home (Tapo

Findings / Shell access · nervous-inhuman tplink-tapo-c200-re · Discussion #6 · GitHub