Authentication Bypass in Tapo C200 V3 by TP-Link

CVE-2025-14300

What is CVE-2025-14300?

The Tapo C200 V3 from TP-Link has a significant security flaw within its HTTPS service, exposing a connectAP interface that lacks adequate authentication mechanisms. This vulnerability allows an unauthenticated attacker on the same local network segment to exploit the device, enabling them to alter Wi-Fi settings. Such unauthorized changes can lead to loss of connectivity for legitimate users and can result in a denial-of-service situation, impacting the overall functionality of the device.

References