Strix
26.1K

CVE-2025-14299

HIGHCVSS 7.1/10EPSS 0.22%

Last modified

CVE-2025-14299 is a high-severity vulnerability rated 7.1/10 on the CVSS scale. The HTTPS server on Tapo C200 V3 does not properly validate the Content-Length header, which can lead to an integer overflow. An unauthenticated attacker on the same local network segment can send crafted HTTPS requests to trigger excessive memory allocation, causing the device to crash and resulting in denial-of-service (DoS).. EPSS estimates a 0.22% chance of exploitation in the next 30 days.

Description

The HTTPS server on Tapo C200 V3 does not properly validate the Content-Length header, which can lead to an integer overflow. An unauthenticated attacker on the same local network segment can send crafted HTTPS requests to trigger excessive memory allocation, causing the device to crash and resulting in denial-of-service (DoS).

Metrics

CVSS 3.1
6.5/10

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS 4.0
7.1/10

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS Probability
0.22%

12.9th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersionsUpdate
Tp-LinkTapo C200 Firmware1.3.3Build 230228
Tp-LinkTapo C200 Firmware1.3.4Build 230424
Tp-LinkTapo C200 Firmware1.3.5Build 230717
Tp-LinkTapo C200 Firmware1.3.7Build 230920
Tp-LinkTapo C200 Firmware1.3.9Build 231019
Tp-LinkTapo C200 Firmware1.3.11Build 231115
Tp-LinkTapo C200 Firmware1.3.13Build 240327
Tp-LinkTapo C200 Firmware1.3.14Build 240513
Tp-LinkTapo C200 Firmware1.3.15Build 240715
Tp-LinkTapo C200 Firmware1.4.1Build 241212
Tp-LinkTapo C200 Firmware1.4.2Build 250313
Tp-LinkTapo C200 Firmware1.4.4Build 250922

References

Timeline

Published
Last Modified
Status
Analyzed

Frequently Asked Questions

What is CVE-2025-14299?
The HTTPS server on Tapo C200 V3 does not properly validate the Content-Length header, which can lead to an integer overflow. An unauthenticated attacker on the same local network segment can send crafted HTTPS requests to trigger excessive memory allocation, causing the device to crash and resulting in denial-of-service (DoS).
How severe is CVE-2025-14299?
CVE-2025-14299 has a CVSS score of 7.1/10 (HIGH severity). The EPSS model estimates a 0.22% probability of exploitation in the next 30 days.
How do I fix CVE-2025-14299?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2025-14299?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST