CVE-2022-37255

published 2023-04-16

CVE-2022-37255: TP-Link Tapo C310 1.3.0 devices allow access to the RTSP video feed via credentials of User --- and Password TPL075526460603.

Priority P2 62 high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C H I N A N

EXPLOIT

TP-Link Tapo C310 1.3.0 devices allow access to the RTSP video feed via credentials of User --- and Password TPL075526460603.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
tp-link	tapo_c310_firmware	—	—

Detection & IOCs extracted from sources · hover to see the quote

other User: --- / Password: TPL075526460603↗

url http://download.tplinkcloud.com/firmware/Tapo_C310v1_en_1.3.0_Build_220328_Rel.64283n_u_1649923652150.bin↗

• → Detect RTSP authentication attempts using the hardcoded default credentials: username '---' and password 'TPL075526460603' against TP-Link Tapo C310 cameras. ↗

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-798