CVE-2026-12760
HIGH
MEDIUM
Priority: 0.03
BB Relevance:
59/100
Published: 2026-06-24
Modified: 2026-10-25
First seen: 2026-10-29
Status: active
Attack Surface
Adjacent
Low Complexity
No Auth
No Interaction
CVSS Vector Breakdown
AV:
Adjacent
AC:
Low
PR:
None
UI:
None
S:
X
AT:
None
VC:
None
VI:
None
VA:
High
Description
A denial-of-service (DoS) vulnerability has been identified in Tapo C200 v3 in the network packet handling logic due to improper handling of IPv4 fragmented packets. An unauthenticated adjacent attacker can send crafted packets to cause excessive resource consumption, leading to instability of the device.Successful exploitation can remotely trigger a temporary denial-of-service condition, causing the camera to become unresponsive and resulting in intermittent loss of video monitoring and recording.
Weakness Classification (1)
Affected Software (11)
| Vendor | Product | Version |
|---|---|---|
| tp-link | tapo_c200_firmware | 1.3.3 |
| tp-link | tapo_c200_firmware | 1.3.4 |
| tp-link | tapo_c200_firmware | 1.3.5 |
| tp-link | tapo_c200_firmware | 1.3.7 |
| tp-link | tapo_c200_firmware | 1.3.9 |
| tp-link | tapo_c200_firmware | 1.3.11 |
| tp-link | tapo_c200_firmware | 1.3.13 |
| tp-link | tapo_c200_firmware | 1.3.14 |
| tp-link | tapo_c200_firmware | 1.3.15 |
| tp-link | tapo_c200_firmware | 1.4.1 |
| tp-link | tapo_c200_firmware | 1.4.2 |
References & Advisories (3)
Vendor Advisory
Release Notes
Release Notes