High · published December 20, 2025
🚨 An unauthenticated interface on Tapo C200 V3 could hand attackers the keys to your Wi-Fi network! Think of your Wi-Fi as a private party — the connectAP interface is like an open door that lets anyone walk in without an invitation. If someone can stroll right in and mess with the music (your Wi-Fi settings), they can throw the whole party into chaos! An attacker on the same local network can exploit this vulnerability to modify your device’s Wi-Fi configuration, potentially severing your connection and leading to a denial-of-service (DoS). That means no internet for you or anyone on that network — absolutely devastating in a world that thrives on connectivity!
Think of your Wi-Fi as a private party — the connectAP interface is like an open door that lets anyone walk in without an invitation. If someone can stroll right in and mess with the music (your Wi-Fi settings), they can throw the whole party into chaos! The HTTPS service on the Tapo C200 V3 exposes a connectAP interface without proper authentication, allowing unauthenticated users to modify Wi-Fi settings.
An attacker on the same local network can exploit this vulnerability to modify your device’s Wi-Fi configuration, potentially severing your connection and leading to a denial-of-service (DoS). That means no internet for you or anyone on that network — absolutely devastating in a world that thrives on connectivity! To safeguard your network, update your Tapo C200 to the latest firmware version as soon as it's available. Additionally, limit access to your network and ensure that all devices are secured with strong passwords, especially those connected to IoT devices. You've got this! Follow these steps, and you'll secure your network in no time! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| tp-link/tapo_c200_firmware | all versions | — |
| tp-link/tapo_c200_firmware | all versions | — |
| tp-link/tapo_c200_firmware | all versions | — |
| tp-link/tapo_c200_firmware | all versions | — |
| tp-link/tapo_c200_firmware | all versions | — |
| tp-link/tapo_c200_firmware | all versions | — |
| tp-link/tapo_c200_firmware | all versions | — |
| tp-link/tapo_c200_firmware | all versions | — |
| tp-link/tapo_c200_firmware | all versions | — |
| tp-link/tapo_c200_firmware | all versions | — |
| tp-link/tapo_c200_firmware | all versions | — |
| tp-link/tapo_c200_firmware | all versions | — |