CVE-2021-4045 PoC — TP-LINK Tapo C200 remote code execution vulnerability

Source

https://github.com/jeffbezosispogg/CVE-2021-4045

Associated Vulnerability

Title:TP-LINK Tapo C200 remote code execution vulnerability (CVE-2021-4045)
Description:TP-Link Tapo C200 IP camera, on its 1.1.15 firmware version and below, is affected by an unauthenticated RCE vulnerability, present in the uhttpd binary running by default as root. The exploitation of this vulnerability allows an attacker to take full control of the camera.

Description

TP-Link Tapo c200 ver <1.1.15 - Remote Code Execution (RCE)

Readme

Exploit Title: TP-LINK Tapo c200 1.1.15 - RCE<br/>
Vendor: https://www.tp-link.com/en/home-networking/cloud-camera/tapo-c200/<br/>
Version: 1.1.15 and below<br/>
CVE: CVE-2021-4045<br/>
Loadable C2 botnet & massexploit<br/> 






Write up of vuln: https://www.hacefresko.com/posts/tp-link-tapo-c200-unauthenticated-rce

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!