CyberRota Analysis
AI-GeneratedThe Tapo C120 v1 and C200 v5 cameras are vulnerable due to a lack of authentication during the HTTPS onboarding process, allowing an adjacent attacker to submit unauthorized wireless configuration parameters. This exploitation can lead to the camera being disconnected from its intended network, resulting in a denial-of-service condition. Organizations using these camera models should prioritize addressing this vulnerability to prevent unauthorized access and potential disruptions to their surveillance systems.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Tapo C120 v1 and C200 v5 do not enforce authentication for do method HTTPS onboarding connect actions after initial setup. An unauthenticated adjacent attacker can submit unauthorized wireless configuration parameters, causing the camera to attempt connection to a different network. Successful exploitation disconnects the camera from its intended wireless network, making it unreachable on its management address, resulting in a denial-of-service condition.