Denial of Service Vulnerability in Tapo C200 V3 by TP-Link

CVE-2025-14299

What is CVE-2025-14299?

The Tapo C200 V3 experiences a vulnerability in its HTTPS server due to improper validation of the Content-Length header. This weakness allows an unauthenticated attacker on the same local network segment to craft malicious HTTPS requests. When executed, these requests can cause excessive memory allocation, leading to a device crash and resulting in denial-of-service instability.

References