CVE-2023-27126 — n/a / n/a

Description (CNA)

The AES Key-IV pair used by the TP-Link TAPO C200 camera V3 (EU) on firmware version 1.1.22 Build 220725 is reused across all cameras. An attacker with physical access to a camera is able to extract and decrypt sensitive data containing the Wifi password and the TP-LINK account credential of the victim.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://www.claranet.fr/blog/dans-les-entrailles-dune-camera-connectee-tp-link-14

ADP enrichment

CVE

No English description supplied.

https://www.claranet.fr/blog/dans-les-entrailles-dune-camera-connectee-tp-link-14

CISA-ADP

No English description supplied.

No references supplied.