A denial-of-service vulnerability exists in the RTSP server component of TP-Link Tapo C520WS v2 due to improper handling of syntactically invalid input. Crafted inputs can trigger a processing error, causing the RTSP service to enter non-responsive state. Successful exploitation may cause the RTSP in a denial-of-service condition.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://www.tp-link.com/us/support/faq/5118/ Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.1 · tp-linkNVD modified 2026-10-26 11:10
Affected (CPE criteria) 1
cpe:2.3:o:tp-link:tapo_c520ws_firmware:*:*:*:*:*:*:*:*