Unauthorized Video Stream Access in TP-Link Tapo C310 Devices
CVE-2022-37255

7.5HIGH

Key Information:

Vendor

Tp-link
Status
Tapo C310 Firmware
Vendor
CVE Published:
16 April 2023

What is CVE-2022-37255?

The TP-Link Tapo C310 devices running version 1.3.0 expose RTSP video feed access, allowing unauthorized users to gain access using default credentials. This vulnerability poses risks to user privacy and security, enabling the potential viewing of sensitive video footage without proper authorization.

References

https://www.tp-link.com/
http://packetstormsecurity.com/files/171540/Tapo-C310-RTS...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.