CVE-2026-15315
Gravedad CVSS v4.0:
ALTA
Tipo:
CWE-287
Autenticación incorrecta
Fecha de publicación:
18/08/2026
Última modificación:
18/08/2026
Descripción
*** Pendiente de traducción *** Tapo C200 v5<br />
contains an improper authentication vulnerability within the login<br />
authentication verification module. An attacker on the local network can<br />
exploit weaknesses in challenge parameter validation to bypass normal<br />
authentication controls and obtain administrative session tokens. <br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
Successful<br />
exploitation may allow an attacker to subsequently execute privileged<br />
management actions, enable unauthorized administrative access and temporary<br />
disruption of device services, resulting in a denial-of-service (DoS)<br />
condition.
Impacto
Puntuación base 4.0
8.70
Gravedad 4.0
ALTA