PT-2025-6036 · Tp Link · Tapo C500 Wi-Fi Camera

Shravan Singh · Published 2025-02-07 · Updated 2025-02-14 · CVE-2025-1099

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Tapo C500 Wi-Fi camera (affected versions not specified)

Description This issue exists due to a hard-coded RSA private key embedded within the device firmware. An attacker with physical access could exploit this to obtain cryptographic private keys, which can then be used for impersonation, data decryption, and man-in-the-middle attacks on the targeted device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-321

Related Identifiers

BDU:2025-02734

CVE-2025-1099

Affected Products

Tapo C500 Wi-Fi Camera

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2025-1099 · Security Note
• https://bdu.fstec.ru/vul/2025-02734 · Security Note
• https://cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2025-0017 · Note
• https://t.me/cvedetector/17554 · Telegram Post
• https://t.me/latest_high_impact_cve/1807 · Telegram Post
• http://download.tplinkcloud.com/firmware/Tapo_C500v1_en_1.3.2_Build_250108_Rel.40063n_up_boot-signed_1737345124385.bin · Note
• https://twitter.com/WolfgangSesin/status/1888946932686450801 · Twitter Post
• https://twitter.com/CVEnew/status/1888903351242244149 · Twitter Post
• https://t.me/cvenotify/111360 · Telegram Post
• https://ogma.in/understanding-and-mitigating-cve-2025-1099-a-vulnerability-in-tp-link-tapo-c500-cameras · Note
• https://t.me/cvenotify/110518 · Telegram Post
• https://cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2025-0017 · Note