TP-Link Tapo C260 Path Traversal Vulnerability
Vulnerability
A path traversal vulnerability has been identified in the TP-Link Tapo C260 v1 camera. This issue arises from improper handling of specific GET request paths over HTTPS, allowing local unauthenticated users to probe the filesystem and determine the existence of certain files on the device. However, this vulnerability does not permit reading, writing, or executing code.
Impact
Exploitation of this vulnerability could lead to unauthorized probing of the device's filesystem, allowing an attacker to determine the presence of specific files.
Remediation
Users are advised to update to the latest firmware version. Instructions for downloading the update are available on the TP-Link Tapo C260 v1 support page.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.