Fiche vulnérabilité
CVE-2026-75619 : faille moyenne tp-link tapo c100 firmware (CVSS 5.7)
Description
Tapo C100/C101 V5 contains a heap-based buffer overflow vulnerability in the RTSP service. An authenticated attacker on the local network can send specially crafted RTSP frame data containing oversized length values, resulting in out-of-bounds heap writes. Successful exploitation can crash the RTSP service and trigger a device reboot, resulting in a temporary denial-of-service condition.
En bref
- Sévérité
- Moyenne (CVSS 5.7)
- Vecteur CVSS
- CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Exploitation active
- Non signalée par la CISA
- Publication
- 19 août 2026
- Dernière mise à jour
- 4 sept. 2026
Produits concernés
- tp-link tapo c100 firmware
- tp-link tapo c101 firmware