CVE-2021-4045
Last modified
CVE-2021-4045 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. TP-Link Tapo C200 IP camera, on its 1.1.15 firmware version and below, is affected by an unauthenticated RCE vulnerability, present in the uhttpd binary running by default as root. The exploitation of this vulnerability allows an attacker to take full control of the camera.. EPSS estimates a 72.84% chance of exploitation in the next 30 days.
Description
TP-Link Tapo C200 IP camera, on its 1.1.15 firmware version and below, is affected by an unauthenticated RCE vulnerability, present in the uhttpd binary running by default as root. The exploitation of this vulnerability allows an attacker to take full control of the camera.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Tp-Link | Tapo C200 Firmware | <= 1.1.15 |
References
- http://packetstormsecurity.com/files/168472/TP-Link-Tapo-c200-1.1.15-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/168472/TP-Link-Tapo-c200-1.1.15-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-4045?
How severe is CVE-2021-4045?
How do I fix CVE-2021-4045?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-40442Microsoft Excel Remote Code Execution Vulnerability7.8
- CVE-2021-40443Windows Common Log File System Driver Elevation of Privilege…7.8
- CVE-2021-40444Microsoft is investigating reports of a remote code executio…8.8
- CVE-2021-40447Windows Print Spooler Elevation of Privilege Vulnerability7.8
- CVE-2021-40448Microsoft Accessibility Insights for Android Information Dis…6.3
- CVE-2021-40449Win32k Elevation of Privilege Vulnerability7.8
- CVE-2021-40450Win32k Elevation of Privilege Vulnerability7.8
- CVE-2021-40452HEVC Video Extensions Remote Code Execution Vulnerability7.8
- CVE-2021-40453HEVC Video Extensions Remote Code Execution Vulnerability7.8
- CVE-2021-40454Rich Text Edit Control Information Disclosure Vulnerability5.5
- CVE-2021-40455Windows Installer Spoofing Vulnerability5.5
- CVE-2021-40456Windows AD FS Security Feature Bypass Vulnerability5.3
Are you affected by CVE-2021-4045?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST