CVE-2026-6239
Gravedad CVSS v4.0:
MEDIA
Tipo:
CWE-121
Desbordamiendo de búfer basado en pila (Stack)
Fecha de publicación:
06/06/2026
Última modificación:
06/06/2026
Descripción
*** Pendiente de traducción *** A stack‑based<br />
buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF CreateUsers service, where<br />
the device fails to properly validate the number of XML user nodes during<br />
request processing. An authenticated attacker can send a specially crafted<br />
ONVIF request containing an excessive number of user entries to trigger memory<br />
corruption.<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
Successful<br />
exploitation may cause the ONVIF management service to terminate unexpectedly,<br />
resulting in a denial‑of‑service (DoS) condition that disrupts device<br />
configuration and management functions.
Impacto
Puntuación base 4.0
6.80
Gravedad 4.0
MEDIA