TP-Link Tapo C200 V3 Improper Content-Length Validation Leading to Denial-of-Service

A denial-of-service vulnerability has been identified in the Tapo C200 V3 camera model. The issue arises because the HTTPS server on this device does not properly validate the Content-Length header. This flaw can lead to an integer overflow, allowing an unauthenticated attacker on the same local network segment to send crafted HTTPS requests. These requests can trigger excessive memory allocation, causing the device to crash and become unresponsive.

Impact

Exploitation of this vulnerability causes the device to crash, leading to a denial-of-service condition where the camera becomes unresponsive.

Remediation

Users are advised to check for updates on the Tapo Mobile Application to address this vulnerability. The latest firmware version can be downloaded from the TP-Link website.