๐Ÿ” CVE Alert

CVE-2023-27126

MEDIUM 4.6
CVSS Score
4.6
EPSS Score
0.0%
EPSS Percentile
0th

The AES Key-IV pair used by the TP-Link TAPO C200 camera V3 (EU) on firmware version 1.1.22 Build 220725 is reused across all cameras. An attacker with physical access to a camera is able to extract and decrypt sensitive data containing the Wifi password and the TP-LINK account credential of the victim.

Vendor n/a
Product n/a
Published Jun 6, 2023
Last Updated Jan 8, 2025
Stay Ahead of the Next One

Get instant alerts for n/a n/a

Be the first to know when new medium vulnerabilities affecting n/a n/a are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

n/a / n/a
n/a

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
tp-link.com: http://tp-link.com tapo.com: http://tapo.com claranet.fr: https://www.claranet.fr/blog/dans-les-entrailles-dune-camera-connectee-tp-link-14