CVE-2021-4045: exploitation status and patch state
CVE-2021-4045 · CVSS 9.8 CRITICAL · EPSS 72%
TP-Link Tapo C200 IP camera, on its 1.1.15 firmware version and below, is affected by an unauthenticated RCE vulnerability, present in the uhttpd binary running by default as root. The exploitation of this vulnerability allows an attacker to take full control of the camera.
Is CVE-2021-4045 exploited?
Not in the CISA KEV catalog.
EPSS puts exploitation in the next 30 days at 72%.
Public exploit code: proof of concept.
Which products and versions are affected?
No affected package list recorded here yet.
Is there a patch?
No patch identifier recorded here yet.
What PlainSec published about CVE-2021-4045
PlainSec has not published a story about this CVE.