漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Authentication Bypass in DS Configuration Service via HTTP Request Parsing Differential of TP-Link Tapo C520WS
Vulnerability Description
An authentication bypass vulnerability within the HTTP handling of the DS configuration service in TP-Link Tapo C520WS v2.6 was identified, due to inconsistent parsing and authorization logic in JSON requests during authentication check. An unauthenticated attacker can append an authentication-exempt action to a request containing privileged DS do actions, bypassing authorization checks. Successful exploitation allows unauthenticated execution of restricted configuration actions, which may result in unauthorized modification of device state.
CVSS Information
N/A
Vulnerability Type
认证机制不恰当
Vulnerability Title
TP-Link Tapo C520WS 安全漏洞
Vulnerability Description
TP-Link Tapo C520WS是中国普联（TP-Link）公司的一个WiFi摄像头。 TP-Link Tapo C520WS v2.6版本存在安全漏洞，该漏洞源于DS配置服务的HTTP处理中身份验证检查期间JSON请求的解析和授权逻辑不一致，可能导致身份验证绕过，进而未经授权修改设备状态。
CVSS Information
N/A
Vulnerability Type
N/A