Insecure Permissiosn vulnerability in TP Link TC70 and C200 WIFI Camera v.3 firmware v.1.3.4 and fixed in v.1.3.11 allows a physically proximate attacker to obtain sensitive information via a connection to the UART pin components.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Tapo_c200_firmware | Tp-link | 1.1.22 (including) | 1.1.22 (including) |
| Tapo_c200_firmware | Tp-link | 1.3.4 (including) | 1.3.4 (including) |
| Tapo_c200_firmware | Tp-link | 1.3.9 (including) | 1.3.9 (including) |
References
- https://github.com/VineethKumarM/TAPO-TC70-Unauthorized-root-access-using-UART
- https://github.com/VineethKumarM/TAPO-TC70-Unauthorized-root-access-using-UART/tree/master
- https://github.com/VineethKumarM/TAPO-TC70-Unauthorized-root-access-using-UART
- https://github.com/VineethKumarM/TAPO-TC70-Unauthorized-root-access-using-UART/tree/master