TP-Link Tapo C200 Buffer Overflow Vulnerability in ONVIF XML Parser Allowing Denial-of-Service

A buffer overflow vulnerability has been identified in the ONVIF XML parser of the TP-Link Tapo C200 V3 camera. This vulnerability allows an unauthenticated attacker on the same local network segment to send specially crafted SOAP XML requests. The exploitation of this vulnerability causes a memory overflow, leading to a device crash and a denial-of-service condition.

Impact

Exploitation of this vulnerability causes the device to crash, creating a denial-of-service condition.

Remediation

Users are advised to check for updates on the Tapo Mobile Application to address this vulnerability. The latest firmware version can be downloaded from the TP-Link Tapo C200 V3 support page.