CVE-2026-1315

Katalog CVE

CVSS 7.5 · High EPSS 0,64%

Kerentanan Improper Input Validation pada tp-link tapo c220 firmware, tp-link tapo c520ws firmware. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

By sending crafted files to the firmware update endpoint of Tapo C220 v1 and C520WS v2, the device terminates core system services before verifying authentication or firmware integrity. An unauthenticated attacker can trigger a persistent denial of service, requiring a manual reboot or application initiated restart to restore normal device operation.

Rincian

Terbit di NVD

27 Januari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-20: Improper Input Validation

EPSS (30 hari)

0,64% peluang dieksploitasi; lebih tinggi dari 49,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.tp-link.com/us/support/faq/4923/ advisory vendor
• https://www.tp-link.com/en/support/download/tapo-c220/v1/ product
• https://www.tp-link.com/en/support/download/tapo-c520ws/v2/ product
• https://www.tp-link.com/us/support/download/tapo-c220/v1.60/ product
• https://www.tp-link.com/us/support/download/tapo-c520ws/v2/ product