Vulnerability Details CVE-2022-41505
An access control issue on TP-LInk Tapo C200 V1 devices allows physically proximate attackers to obtain root access by connecting to the UART pins, interrupting the boot process, and setting an init=/bin/sh value.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 11.8%
CVSS Severity
CVSS v3 Score 6.4
References
Products affected by CVE-2022-41505
-
cpe:2.3:h:tp-link:tapo_c200_v1:-
-
cpe:2.3:o:tp-link:tapo_c200_v1_firmware:-