CVE-2022-41505

6.4 mediumEPSS 0.4%

Medium (6.4) in tp-link tapo c200 v1 firmware. EPSS 0.4% chance of exploitation in the next 30 days.

An access control issue on TP-LInk Tapo C200 V1 devices allows physically proximate attackers to obtain root access by connecting to the UART pins, interrupting the boot process, and setting an init=/bin/sh value.

Severity

CVSS 3.1

6.4 medium

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 34% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2023-01-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

tp-link:tapo_c200_v1_firmware

References

https://github.com/hemant70072/Access-control-issue-in-TP-Link-Tapo-C200-V1.
https://github.com/hemant70072/Access-control-issue-in-TP-Link-Tapo-C200-V1.

Check your stack JSON