What’s Vulnerable › Vulnerabilities

CVE-2023-49515

• Severity: medium (CVSS 4.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-01-17 · updated 2026-06-17
• Weakness: CWE-922

Description

Insecure Permissiosn vulnerability in TP Link TC70 and C200 WIFI Camera v.3 firmware v.1.3.4 and fixed in v.1.3.11 allows a physically proximate attacker to obtain sensitive information via a connection to the UART pin components.

Affected products

• TP-Link Systems Inc. Tapo C200 v5: 1.1.22, 1.3.4, 1.3.9
• TP-Link Tapo Tc70 Firmware: 1.1.22, 1.3.4, 1.3.9

References

• https://github.com/VineethKumarM/TAPO-TC70-Unauthorized-root-access-using-UART
• https://github.com/VineethKumarM/TAPO-TC70-Unauthorized-root-access-using-UART/tree/master
• https://github.com/VineethKumarM/TAPO-TC70-Unauthorized-root-access-using-UART
• https://github.com/VineethKumarM/TAPO-TC70-Unauthorized-root-access-using-UART/tree/master

Get alerted when CVE-2023-49515 or the next vulnerability affects your stack