جزئیات آسیب‌پذیری
CVE-2026-34118
TP-Link Systems Tapo C100 v5TP-Link Systems Tapo C101 v5TP-Link Systems Tapo C200 v3TP-Link Systems Tapo C210 v3TP-Link Systems Tapo C520WSTP-Link Systems Tapo TC70 v3
Heap-based Buffer Overflow Vulnerability Leading to Denial-of-Service in multiple TP-Link Tapo Cameras
CVSS 4.0
7.1بالا
شرح رسمی (انگلیسی)
A heap-based buffer overflow vulnerability was identified in multiple TP-Link Tapo cameras in the HTTP POST body parsing logic due to missing validation of remaining buffer capacity after dynamic allocation, due to insufficient boundary validation when handling externally supplied HTTP input. An attacker on the same network segment could trigger heap memory corruption conditions by sending crafted payloads that cause write operations beyond allocated buffer boundaries. Successful exploitation causes a Denial-of-Service (DoS) condition, causing the device’s process to crash or become unresponsive.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 7.1بالا | 4.0 | CVEProject cvelistV5 (CNA) (TPLink) | CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| TP-Link Systems Inc. | Tapo C100 v5 | v < 1.5.4 Build 260528 Rel.11462n | CVEProject cvelistV5 (CNA) |
| TP-Link Systems Inc. | Tapo C101 v5 | v < 1.5.4 Build 260528 Rel.11462n | CVEProject cvelistV5 (CNA) |
| TP-Link Systems Inc. | Tapo C200 v3 | v < 1.9.2 Build 261009 Rel.61408n | CVEProject cvelistV5 (CNA) |
| TP-Link Systems Inc. | Tapo C210 v3 | v < V3.6_1.2.7 Build 260818 | CVEProject cvelistV5 (CNA) |
| TP-Link Systems Inc. | Tapo C520WS v2.6 | v < 1.2.4 Build 260326 Rel.24666n | CVEProject cvelistV5 (CNA) |
| TP-Link Systems Inc. | Tapo TC70 v3 | v < 1.9.2 Build 261009 Rel.61408n | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۱۰- https://www.tp-link.com/us/support/download/tapo-c520ws/#Firmware-Release-Notes patch
- https://www.tp-link.com/en/support/download/tapo-c520ws/#Firmware-Release-Notes patch
- https://www.tp-link.com/us/support/faq/5047/ vendor-advisory
- https://www.tp-link.com/us/support/download/tapo-c100/v5/#Firmware-Release-Notes patch
- https://www.tp-link.com/en/support/download/tapo-c100/v5/#Firmware-Release-Notes patch
- https://www.tp-link.com/us/support/download/tapo-c101/v5/#Firmware-Release-Notes patch
- https://www.tp-link.com/us/support/download/tapo-c210/v3.60/#Firmware-Release-Notes patch
- https://www.tp-link.com/en/support/download/tc70/v3/#Firmware-Release-Notes patch
- https://www.tp-link.com/en/support/download/tapo-c200/v3/#Firmware-Release-Notes patch
- https://www.tp-link.com/us/support/download/tapo-c200/v3/#Firmware-Release-Notes patch
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۱/۱۳
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۸/۱۱
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- TPLink
پیش‌بینی بهره‌برداری (EPSS)
۰٫۴۵٪
احتمال بهره‌برداری در ۳۰ روز
۳۹٫۴٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- جزئی
ضعف‌ها (CWE)
- CWE-122Heap-based buffer overflow