Simone Margaritelli

**Name of the Vulnerable Software and Affected Versions** Tapo C200 V3 (affected versions not specified) **Description** The device’s HTTPS server does not correctly validate the Content-Length header, leading to an integer overflow. An attacker on the same local network can send specially crafted HTTPS requests to cause excessive memory allocation, resulting in a denial-of-service (DoS) condition and device crash. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tapo C200 V3 (affected versions not specified) **Description** The HTTPS service on the device has a connectAP interface lacking proper authentication. An attacker on the same local network can exploit this to change the device’s Wi-Fi settings, leading to a loss of connectivity and a denial-of-service (DoS) condition. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tapo C200 V3 (affected versions not specified) **Description** A buffer overflow exists in the ONVIF XML parser. An attacker on the same local network can send specially crafted SOAP XML requests, leading to memory overflow and a device crash, resulting in denial-of-service (DoS). The vulnerability is present in the processing of XML requests via the ONVIF interface. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** TerraMaster TOS versions prior to 3.0.34 **Description** A Shell metacharacter injection issue in the `/usr/www/include/ajax/GetTest.php` file allows for remote code execution as root. **Recommendations** For versions prior to 3.0.34, update to version 3.0.34 or later to resolve the issue.