Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Insecure Access Control on TP-Link Tapo D235 and C260
Vulnerability Description
On TP-Link Tapo C260 v1 and D235 v1, a guest‑level authenticated user can bypass intended access restrictions by sending crafted requests to a synchronization endpoint. This allows modification of protected device settings despite limited privileges. An attacker may change sensitive configuration parameters without authorization, resulting in unauthorized device state manipulation but not full code execution.
CVSS Information
N/A
Vulnerability Type
访问控制不恰当
Vulnerability Title
TP-Link Tapo C260 安全漏洞
Vulnerability Description
TP-Link Tapo C260是中国普联（TP-Link）公司的一个监控摄像机。 TP-Link Tapo C260 v1版本存在安全漏洞，该漏洞源于访客级认证用户可通过特制请求绕过访问限制，可能导致未经授权的设备状态操纵。
CVSS Information
N/A
Vulnerability Type
N/A