PT-2026-52038 · Tp Link Systems · Tapo C200 V3

Publicado 2026-06-24 · Atualizado 2026-06-24 · CVE-2026-12760

Mitre

CVSS v4.0

7.1

Alta

Vetor base

AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

A denial-of-service (DoS) vulnerability has been identified in Tapo C200 v3 in the network packet handling logic due to improper handling of IPv4 fragmented packets.  An unauthenticated adjacent attacker can send crafted packets to cause excessive resource consumption, leading to instability of the device.Successful exploitation can remotely trigger a temporary denial-of-service condition, causing the camera to become unresponsive and resulting in intermittent loss of video monitoring and recording.

Correção

Allocation of Resources Without Limits

Enumeração de Fraquezas

CWE-770

Identificadores relacionados

CVE-2026-12760

Produtos afetados

Tapo C200 V3

Referências · 4

• https://tp-link.com/us/support/download/tapo-c200/v3/#Firmware-Release-Notes · Correção
• https://tp-link.com/en/support/download/tapo-c200/v3/#Firmware-Release-Notes · Correção
• https://tp-link.com/us/support/faq/5143 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-12760 · Nota de Segurança