Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Priority LOW 39

TP-Link Tapo C325WB V2 generates the pre-shared key used by its local media streaming service with a time-seeded pseudo-random number generator, making the key predictable and recoverable.

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.00266 Published 2026-10-08 Fixed in V2_1.3.3 Build 260914 CWE-330
Priority MEDIUM 40

TP-Link Tapo C325WB V2 contains an unauthenticated authorization bypass vulnerability in the HTTPS JSON API dispatcher on TCP port 443.

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.00343 Published 2026-10-08 Fixed in V2_1.3.3 Build 260914 CWE-287
Priority LOW 31

An unauthenticated denial-of-service vulnerability exists in Tapo C325WB v2 in the RTSP streaming service on TCP port 554 when the Camera Account feature is enabled.

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00264 Published 2026-10-08 Fixed in V2_1.3.3 Build 260914 CWE-121