CyberRota Analysis
AI-GeneratedThe Tapo C100/C101 V5 devices are vulnerable to a heap-based buffer overflow in their RTSP service, allowing authenticated attackers on the local network to exploit oversized length values in RTSP frame data. This could lead to out-of-bounds heap writes, causing the RTSP service to crash and the device to reboot, resulting in a temporary denial-of-service condition. Users of these devices, particularly those managing local networks, should prioritize addressing this vulnerability to maintain service availability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Tapo C100/C101 V5 contains a heap-based buffer overflow vulnerability in the RTSP service. An authenticated attacker on the local network can send specially crafted RTSP frame data containing oversized length values, resulting in out-of-bounds heap writes. Successful exploitation can crash the RTSP service and trigger a device reboot, resulting in a temporary denial-of-service condition.
Related CVEs
Other vulnerabilities affecting the same vendor(s)