DailyCVE@dailycve
🔴 TP-Link Tapo C200, Command Injection, #CVE-2021-4045 (Critical) -DC-Oct2026-3882 https://dailycve.com/tp-link-tapo-c200-command-injection-cve-2021-4045-critical-dc-oct2026-3882/
0000044
248 followersView on X
CVE-2021-4045(tp-link / tapo_c200)
LOWCVSS 9.8 · CRITICALSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
TP-Link Tapo C200 IP camera, on its 1.1.15 firmware version and below, is affected by an unauthenticated RCE vulnerability, present in the uhttpd binary running by default as root. The exploitation of this vulnerability allows an attacker to take full control of the camera.
0.0/ 10 priority
Sources & remediation
Exploit / PoC references
Vendor / third-party advisories
Weakness type (CWE)
CWE-77
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
Are you affected?
If you run products in this scope, you should treat this CVE as relevant to your environment.
- tapo_c200
- tapo_c200_firmware
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day
Affected systems
Vendors
Products
tapo_c200tapo_c200_firmware
1 version affected across 2 products
Deep dive
Activity timeline1 mentions / 1d
Referenced assets1 URL
Full discourse1 post
CPE platform detail2 entries
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tp-link | tapo_c200 | - | - | - |
| OS | tp-link | tapo_c200_firmware | - | - | - |