medium4.6
CVE-2023-49515
Insecure Permissiosn vulnerability in TP Link TC70 and C200 WIFI Camera v.3 firmware v.1.3.4 and fixed in v.1.3.11 allows a physically proximate attacker to ob…
Impact
Insecure Permissiosn vulnerability in TP Link TC70 and C200 WIFI Camera v.3 firmware v.1.3.4 and fixed in v.1.3.11 allows a physically proximate attacker to obtain sensitive information via a connection to the UART pin components.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tp-Link | Tapo C200 Firmware | Versions 1.1.22, 1.3.4, 1.3.9 |
| Tp-Link | Tapo Tc70 Firmware | Versions 1.1.22, 1.3.4, 1.3.9 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/VineethKumarM/TAPO-TC70-Unauthorized-root-access-using-UART
- https://github.com/VineethKumarM/TAPO-TC70-Unauthorized-root-access-using-UART/tree/master
- https://github.com/VineethKumarM/TAPO-TC70-Unauthorized-root-access-using-UART
- https://github.com/VineethKumarM/TAPO-TC70-Unauthorized-root-access-using-UART/tree/master