High severity · published Dec 20, 2025
CVE-2025-14300
Unauthenticated Access to connectAP API Endpoint on Tapo C100, C200 & C425
8.1
CVSS
0.4%
EPSS
No
On KEV
Description
The HTTPS service on Tapo C200 v3, v5, C425 v1.2 and C100 v5 exposes a connectAP interface without proper authentication. An unauthenticated attacker on the same local network segment can exploit this to modify the device’s Wi-Fi configuration, resulting in loss of connectivity and denial-of-service (DoS).
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 31% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TC
Tapo C100 v5 · TP Link Systems Inc.
before V5_1.4.4 Build 260303 · source: vendor
TC
Tapo C200 · TP-Link Systems Inc.
before V3_1.4.5 Build 251104; before V5_1.4.6 Build 260709 Rel.27675n · source: vendor
TC
Tapo C425 v1.2 · TP Link Systems Inc.
before V1.20_1.2.27 Build 260518 · source: vendor
TC
Tapo C200 Firmware · Tp-link
1.3.3; 1.3.4; 1.3.5; 1.3.7; 1.3.9; 1.3.11; +6 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-14300
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-14300
patch
https://www.tp-link.com/us/support/download/tapo-c200/v3/#Firmware-Release-Notes
vendor-advisory
https://www.tp-link.com/us/support/faq/4849/
patch
https://www.tp-link.com/en/support/download/tapo-c100/v5/#Firmware-Release-Notes
patch
https://www.tp-link.com/us/support/download/tapo-c100/v5/#Firmware-Release-Notes
patch
https://www.tp-link.com/en/support/download/tapo-c200/v3/#Firmware-Release-Notes
patch
https://www.tp-link.com/us/support/download/tapo-c425/v1.20/#Firmware-Release-Notes
More from Tapo C100 v5
7.5
CVE-2026-0918
Null Pointer Dereference in Tapo SmartCam HTTP Service on TP-Link Tapo C220 & C520WS
6.5
CVE-2026-75618
RTSP Null Pointer Dereference Denial-of-Service Vulnerability on TP-Link Tapo C100 and C101
6.5
CVE-2026-34118
Heap-based Buffer Overflow Vulnerability Leading to Denial-of-Service in TP-Link Tapo C100, C101, C210 & C520WS
5.7
CVE-2026-75619
RTSP Heap Buffer Overflow Denial-of-Service Vulnerability on TP-Link Tapo C100 and C101