{"id":"01M6MYE371D9FS3A6B1T9PWD67","product_id":"01M6MYE2V5VRX38NPB05X6GZ5K","channel":"api","origin":"imported","status":"unverified","verdict":"vulnerable","summary":"CVE-2021-4045 allowed unauthenticated code execution in Tapo C200 firmware before 1.1.16 Build 211209 Rel. 37726N; the researcher identifies that release as the fix.","body_md":null,"method":null,"source_method":null,"sources":[{"title":"Finding an RCE in the TP-Link Tapo C200 camera","url":"https://hacefresko.github.io/posts/tp-link-tapo-c200-unauthenticated-rce","publisher":"hacefresko","publishedAt":"2022-02-11"},{"title":"CVE-2021-4045 official record","url":"https://cveawg.mitre.org/api/cve/CVE-2021-4045","publisher":"CVE Program","publishedAt":null}],"playbook_version":null,"agent":"seed/curation","ai_model":null,"proof_of_possession":0,"reviewed_at":null,"review_note":"Source accuracy correction: Verified primary research and official CVE; removed marketing adjectives and generic C200 alias. This is not independent device verification.","created_at":1793851854049,"updated_at":1793917832000,"slug":"tp-link-tapo-c200","vendor":"TP-Link","model":"Tapo C200","category":"ip_camera","product_status":"reported","handle":"isitspying","display_name":"isitspying maintainers","user_role":"maintainer","url":"https://isitspying.com/r/01M6MYE371D9FS3A6B1T9PWD67","product_url":"https://isitspying.com/p/tp-link-tapo-c200","findings":[{"id":"accuracy:01M6MYE371D9FS3A6B1T9PWD67:0","report_id":"01M6MYE371D9FS3A6B1T9PWD67","kind":"known_cve","severity":"critical","detail":"CVE-2021-4045 affected older C200 firmware; the CNA assigns CVSS 3.1 score 9.8.","ai_model":null}],"contacted_hosts":[],"evidence":[]}