Tapo C520Ws V2 6 CVE-2026-34122

TP-Link Tapo C520WS v2.6 with vulnerable configuration handling component. Attacker with adjacent network access (AV:A) supplies excessively long value to vulnerable configuration parameter, causing stack overflow and DoS. No authentication or user interaction required.

Without a CVSS vector or score provided, risk assessment relies on the attack surface characteristics and impact type. The vulnerability results in denial-of-service only, not confidentiality or integrity compromise, limiting its severity impact to availability. The attack vector is assumed to be network-based (typical for IP camera configuration interfaces), but authentication requirements cannot be confirmed from available data. The presence of a vendor-released patch reduces operational risk for patched deployments. However, the criticality depends on whether the vulnerable configuration parameter accepts unauthenticated input and whether widespread deployments remain on v2.6. Organizations using Tapo C520WS cameras in security-critical applications where availability is paramount should prioritize patching, though this is not a critical RCE scenario.

An attacker on the network sends a configuration request to the Tapo C520WS v2.6 camera with an excessively long parameter value targeting the vulnerable configuration handling component. The oversized input overflows the stack buffer, corrupting memory and causing the camera firmware to crash or reboot. The camera becomes unavailable for recording and live viewing until manually restarted, disrupting security monitoring. No public exploit code availability is confirmed at time of analysis.