Vulnerability Description
By sending crafted files to the firmware update endpoint of Tapo C220 v1 and C520WS v2, the device terminates core system services before verifying authentication or firmware integrity. An unauthenticated attacker can trigger a persistent denial of service, requiring a manual reboot or application initiated restart to restore normal device operation.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tp-Link | Tapo C220 Firmware | < 1.4.2 |
| Tp-Link | Tapo C220 | 1 |
| Tp-Link | Tapo C520Ws Firmware | < 1.2.3 |
| Tp-Link | Tapo C520Ws | 2 |
Related Weaknesses (CWE)
References
- https://www.tp-link.com/en/support/download/tapo-c220/v1/Product
- https://www.tp-link.com/en/support/download/tapo-c520ws/v2/Product
- https://www.tp-link.com/us/support/download/tapo-c220/v1.60/Product
- https://www.tp-link.com/us/support/download/tapo-c520ws/v2/Product
- https://www.tp-link.com/us/support/faq/4923/Vendor Advisory
FAQ
What is CVE-2026-1315?
CVE-2026-1315 is a vulnerability with a CVSS score of 7.5 (HIGH). By sending crafted files to the firmware update endpoint of Tapo C220 v1 and C520WS v2, the device terminates core system services before verifying authentication or firmware integrity. An unauthentic...
How severe is CVE-2026-1315?
CVE-2026-1315 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-1315?
Check the references section above for vendor advisories and patch information. Affected products include: Tp-Link Tapo C220 Firmware, Tp-Link Tapo C220, Tp-Link Tapo C520Ws Firmware, Tp-Link Tapo C520Ws.