Описание
A denial-of-service vulnerability exists in the RTSP server component of TP-Link Tapo C520WS v2 due to improper handling of syntactically invalid input. Crafted inputs can trigger a processing error, causing the RTSP service to enter non-responsive state.
Successful exploitation may cause the RTSP in a denial-of-service condition.
Уязвимые конфигурации
Конфигурация 1Версия до 1.2.6 (исключая)
Одновременно
cpe:2.3:o:tp-link:tapo_c520ws_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:tapo_c520ws:2.0:*:*:*:*:*:*:*
EPSS
Процентиль: 11%
0.00206
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-20
NVD-CWE-noinfo
Связанные уязвимости
CVSS3: 6.5
github
около 2 месяцев назад
A denial-of-service vulnerability exists in the RTSP server component of TP-Link Tapo C520WS v2 due to improper handling of syntactically invalid input. Crafted inputs can trigger a processing error, causing the RTSP service to enter non-responsive state. Successful exploitation may cause the RTSP in a denial-of-service condition.
EPSS
Процентиль: 11%
0.00206
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-20
NVD-CWE-noinfo