CVE-2021-4045

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

TP-Link Tapo C200 IP camera, on its 1.1.15 firmware version and below, is affected by an unauthenticated RCE vulnerability, present in the uhttpd binary running by default as root. The exploitation of this vulnerability allows an attacker to take full control of the camera.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77

Affected software

No affected versions have been published.

Timeline

Published
Mar 10, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-404507.8Win32k Elevation of Privilege VulnerabilityCVE-2021-404527.8HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2021-404537.8HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2021-404545.5Rich Text Edit Control Information Disclosure VulnerabilityCVE-2021-404555.5Windows Installer Spoofing VulnerabilityCVE-2021-404565.3Windows AD FS Security Feature Bypass VulnerabilityCVE-2021-404577.4Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting VulnerabilityCVE-2021-40465.4The m_txtNom y m_txtCognoms parameters in TCMAN GIM v8.01 allow an attacker to perform persistent XSS attacks. This vulnerability could be uCVE-2021-404606.5Windows Remote Procedure Call Runtime Security Feature Bypass VulnerabilityCVE-2021-404618.0Windows Hyper-V Remote Code Execution VulnerabilityCVE-2021-404627.8Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution VulnerabilityCVE-2021-404637.7Windows Network Address Translation (NAT) Denial of Service Vulnerability
CVE-2021-4045: Critical severity, CVSS 9.8 | Vulnix