Tapo C320Ws V2
Monthly
Authenticated stack-based buffer overflow in TP-Link Tapo C320WS V2.0 cameras lets an attacker on the adjacent network who already holds valid device credentials overwrite stack memory through an oversized encrypted password field submitted to the local onboarding Wi-Fi configuration path, ultimately executing commands as root. Because the trigger lives in the provisioning endpoint that is only reachable on the local or onboarding LAN (not from the internet) and requires high-privilege authentication, exploitation is conditionally gated rather than broadly opportunistic; no public exploit code or confirmed active exploitation was identified at time of analysis. Successful abuse lets the attacker take control of the camera, alter its behavior, read sensitive local configuration, and disrupt availability, and TP-Link has published fixed firmware on its download portal.
Authenticated stack-based buffer overflow in TP-Link Tapo C320WS V2.0 cameras lets an attacker on the adjacent network who already holds valid device credentials overwrite stack memory through an oversized encrypted password field submitted to the local onboarding Wi-Fi configuration path, ultimately executing commands as root. Because the trigger lives in the provisioning endpoint that is only reachable on the local or onboarding LAN (not from the internet) and requires high-privilege authentication, exploitation is conditionally gated rather than broadly opportunistic; no public exploit code or confirmed active exploitation was identified at time of analysis. Successful abuse lets the attacker take control of the camera, alter its behavior, read sensitive local configuration, and disrupt availability, and TP-Link has published fixed firmware on its download portal.