← Database

CVE-2022-41505

MEDIUM CVSS: 6.4 Published: 2023-01-23 Modified: 2026-06-17

Description

An access control issue on TP-LInk Tapo C200 V1 devices allows physically proximate attackers to obtain root access by connecting to the UART pins, interrupting the boot process, and setting an init=/bin/sh value.

Affected Platforms

Tp-Link Tapo C200 V1 FirmwareTp-Link Tapo C200 V1

Weakness Type

NVD-CWE-Other, CWE-306

References