CVE-2021-4045 TP-LINK Tapo C200 remote code execution vulnerability

What is CVE-2021-4045?

CVE-2021-4045 is a critical command injection vulnerability in TP-Link Tapo C200, published on 7 Mar 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

TP-Link Tapo C200 IP camera, on its 1.1.15 firmware version and below, is affected by an unauthenticated RCE vulnerability, present in the uhttpd binary running by default as root. The exploitation of this vulnerability allows an attacker to take full control of the camera.

Weakness: CWE-77

Which versions are affected by CVE-2021-4045?

It affects 1 product.

Products include Tp-Link Tapo C200 Firmware.

How do I fix CVE-2021-4045?

No fix has been published for CVE-2021-4045 yet. Limit exposure of the affected software until one is available.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2021-4045 being exploited?

There is no known exploitation of CVE-2021-4045 in the wild and no public exploit code.

Public exploit code: 1 Exploit-DB entry and 6 proofs of concept on GitHub.

Other vulnerabilities in TP-Link Tapo C200

• CVE-2025-14300 Unauthenticated Access to connectAP API Endpoint on Tapo C100, C200 & C425 High 8.7
• CVE-2025-8065 Remote Code Execution via Stack-based Buffer Overflow in ONVIF SOAP Parser in TP-Link Tapo C200 and C520WS High 8.7
• CVE-2026-15316 Denial-of-Service via Oversized Encrypted Credential Input in TP-Link Tapo C200 High 7.1
• CVE-2026-12760 Denial-of-Service Vulnerability via Malformed IPv4 Fragmentation Handling in TP-Link Tapo C200 High 7.1
• CVE-2026-1871 Authenticated Stack-based Buffer Overflow in RTSP Authentication of Tapo C200 High 7.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-574v-3xxh-gwh5.