CVEvulnerability

CVE-2026-12760

7.1 HIGH Published 2026-06-24 Modified 2026-10-25 Official page ↗
Status
Analyzed
Published
2026-06-24
Last modified
2026-10-25
Assigner
f23511db-6c3e-4e32-a477-6aa17d310630
CVSS 4.0 (f23511db-6c3e-4e32-a477-6aa17d310630)
7.1 HIGH — CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-770

Description

A denial-of-service (DoS) vulnerability has been identified in Tapo C200 v3 in the network packet handling logic due to improper handling of IPv4 fragmented packets.  An unauthenticated adjacent attacker can send crafted packets to cause excessive resource consumption, leading to instability of the device.Successful exploitation can remotely trigger a temporary denial-of-service condition, causing the camera to become unresponsive and resulting in intermittent loss of video monitoring and recording.

Affected configurations

• tp-link tapo c200 firmware 1.3.3 • tp-link tapo c200 firmware 1.3.4 • tp-link tapo c200 firmware 1.3.5 • tp-link tapo c200 firmware 1.3.7 • tp-link tapo c200 firmware 1.3.9 • tp-link tapo c200 firmware 1.3.11 • tp-link tapo c200 firmware 1.3.13 • tp-link tapo c200 firmware 1.3.14 • tp-link tapo c200 firmware 1.3.15 • tp-link tapo c200 firmware 1.4.1 • tp-link tapo c200 firmware 1.4.2

Related

Weakness · CWE (1)

  • CWE-770 Allocation of Resources Without Limits or Throttling weakness

References