CVE-2026-1315

HIGH EPSS 43.2%
Published Jan 27, 20265mo ago · Modified Jun 17, 20261w ago
7.1 CVSS 4.0
High
Find Similar
Published Jan 27, 2026 5mo ago
Last Modified Jun 17, 2026 1w ago

Description

By sending crafted files to the firmware update endpoint of Tapo C220 v1 and C520WS v2, the device terminates core system services before verifying authentication or firmware integrity. An unauthenticated attacker can trigger a persistent denial of service, requiring a manual reboot or application initiated restart to restore normal device operation.

CVSS Details

Base Score
7.1
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Adjacent
Attack Complexity Low
Privileges Required None
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
43.2% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-20 Improper Input Validation Validation

Affected Products 4

VendorProductVersionRange
tp-linktapo_c220_firmware* <1.4.2
tp-linktapo_c2201any
tp-linktapo_c520ws_firmware* <1.2.3
tp-linktapo_c520ws2any

References 5

  • tp-link.com https://www.tp-link.com/en/support/download/tapo-c220/v1/
    Product
  • tp-link.com https://www.tp-link.com/en/support/download/tapo-c520ws/v2/
    Product
  • tp-link.com https://www.tp-link.com/us/support/download/tapo-c220/v1.60/
    Product
  • tp-link.com https://www.tp-link.com/us/support/download/tapo-c520ws/v2/
    Product
  • tp-link.com https://www.tp-link.com/us/support/faq/4923/
    Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.