CyberRota Analysis
AI-GeneratedThe Tapo C200 v5 is vulnerable due to an improper authentication flaw in its login verification module, allowing attackers on the local network to bypass authentication controls and obtain administrative session tokens. This exploitation can lead to unauthorized administrative access, enabling privileged actions and potentially causing a denial-of-service (DoS) condition. Organizations using this device should prioritize patching to mitigate the risk of local network attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Tapo C120 v1 and C200 v5 contain an improper authentication vulnerability within the login authentication verification module. An attacker on the local network can exploit weaknesses in challenge parameter validation to bypass normal authentication controls and obtain administrative session tokens. Successful exploitation may allow an attacker to subsequently execute privileged management actions, enable unauthorized administrative access and temporary disruption of device services, resulting in a denial-of-service (DoS) condition.
Related CVEs
Other vulnerabilities affecting the same vendor(s)