CVE-2026-8714: falha de alta gravidade em TP-Link Systems Inc. Tapo C520WS v2
Denial-of-Service Vulnerability in RTSP Input Handling on TP-Link's Tapo C520WS
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.1epss 0.2%
A denial-of-service
vulnerability exists in the RTSP server component of TP-Link Tapo C520WS v2 due to improper handling of
syntactically invalid input. Crafted inputs
can trigger a processing error, causing the RTSP service to enter non-responsive
state.
Successful
exploitation may cause the RTSP in a denial-of-service condition.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Produtos afetados
TP-Link Systems Inc. · Tapo C520WS v2CVEs relacionadas — TP-Link Systems Inc. Tapo C520WS v2
No mesmo produto, das mais perigosas para as menos.
CVE-2026-0918HIGHNull Pointer Dereference in Tapo SmartCam HTTP Service on TP-Link Tapo C220 & C520WSEPSS 0.7%CVE-2026-1315HIGHUnauthenticated Denial of Service via Firmware Update Endpoint on TP-Link Tapo C220 & C520WSEPSS 0.6%CVE-2026-0919HIGHUnauthenticated Denial of Service via Oversized URL in HTTP Parser on TP-Link Tapo C210, C220 & C520WSEPSS 0.6%CVE-2026-6240MEDIUMAuthenticated Stack-based Buffer Overflow in ONVIF DeleteUsers Service on TP-Link Tapo C520WSEPSS 0.2%CVE-2026-6239MEDIUMAuthenticated Stack-based Buffer Overflow in ONVIF CreateUsers Service in TP-Link Tao C520WSEPSS 0.2%CVE-2026-6242MEDIUMAuthenticated Format String Vulnerability in ONVIF Subscribe Service on TP-Link Tapo C520WSEPSS 0.2%