CVE-2025-14299

7.1 highEPSS 0.2%

High (7.1) in tp-link tapo c200 firmware. EPSS 0.2% chance of exploitation in the next 30 days.

The HTTPS server on Tapo C200 V3 does not properly validate the Content-Length header, which can lead to an integer overflow. An unauthenticated attacker on the same local network segment can send crafted HTTPS requests to trigger excessive memory allocation, causing the device to crash and resulting in denial-of-service (DoS).

Severity

CVSS 4.0

7.1 high

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

6.5 medium

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 15% of CVEs (scores of 2026-10-31)
CWEs: CWE-190, CWE-770
Published: 2025-12-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

tp-link:tapo_c200_firmware

References

https://www.tp-link.com/us/support/download/tapo-c200/v3/#Firmware-Release-Notes
https://www.tp-link.com/us/support/faq/4849/

Check your stack JSON