You do not have permission to edit this page, for the following reasons:
'''Evidence review addendum — 2026-10-24. Public-document review; ratings with evidence gaps remain provisional.''' This addendum supersedes earlier inconsistent wording on the same fields. It is based on public documents and the saved website snapshot; no installed device was tested. Historical research below remains historical evidence. Unverified flash protection and interface-specific controls are not verified device facts. == Documented basic information == * 尺寸: 86.6 × 85 × 117.7 mm (W×D×H; AU V3) [https://www.tp-link.com/au/home-networking/cloud-camera/tapo-c200/v3/ Source] * 重量: 190 g / 6.7 oz (AU V3) [https://www.tp-link.com/au/home-networking/cloud-camera/tapo-c200/v3/ Source] * 内存: 64 MB RAM (512 Mbit) [https://www.tp-link.com/au/home-networking/cloud-camera/tapo-c200/v3/ Source] * 存储: 8 MB ROM (64 Mbit); microSD up to 512 GB with applicable firmware, card not included [https://www.tp-link.com/au/home-networking/cloud-camera/tapo-c200/v3/ Source] * 电源: Adapter AC 100–240 V, 50/60 Hz; DC 9 V, 0.6 A [https://www.tp-link.com/au/home-networking/cloud-camera/tapo-c200/v3/ Source] * 摄像头: 1920×1080, 15 fps, H.264; 1/2.9-inch sensor [https://www.tp-link.com/au/home-networking/cloud-camera/tapo-c200/v3/ Source] * 声音: Built-in microphone and speaker; two-way audio [https://www.tp-link.com/au/home-networking/cloud-camera/tapo-c200/v3/ Source] * 连接方式: 2.4 GHz 802.11b/g/n Wi-Fi; RTSP/ONVIF configurable; no Ethernet [https://www.tp-link.com/au/home-networking/cloud-camera/tapo-c200/v3/ Source] == Revised security evidence notes == * 防暴力破解: TP-Link support states that frequent failures can lock a Tapo App account. This supports cloud-account protection; thresholds, duration and C200 local-interface behavior are not established. [https://community.tp-link.com/en/home/forum/topic/714488 Source] [https://www.tp-link.com/us/support/faq/3395/ Source] * 更新能力: Official US V3 notes list releases in 2025 and 2026, including 1.4.5 and 1.9.1. The limited-public-history rationale needs revision; AU rollout and the installed build are unverified. Frequency scoring requires a common observation window. [https://www.tp-link.com/us/support/faq/5143/ Source] [https://www.tp-link.com/us/support/download/tapo-c200/v3/ Source] == Scoring status == Existing selected scores are a saved comparison baseline, not newly validated final scores. Recheck version, region and assessment path before updating options. Recalculate CATS/GRAS and synchronize this section after all selected options are settled. Do not infer a secure or insecure flash state from a downloadable firmware image or encrypted data volumes. ---- '''Research assessment reviewed 2026-10-22. This grade is an assessor risk profile based on the stated evidence and inferences, not a test or certification of an individual installed device.''' == Assessment scope and limits == Hardware V3, stock firmware. V3-specific fix reference: 1.4.4 Build 250922. Generic family-page features may describe newer revisions. Cloud app access and optional local RTSP are separate channels. Historical vulnerability evidence, current documented capabilities and assessor inferences are identified separately in the comments. Historical-build findings are not asserted in every patched build. Configuration-dependent benefits apply only when the specified settings are enabled. The rubric does not define numerical Rare/Very common thresholds; qualitative mappings are explained. DATE PROXY approved for this review: 3 September 2019 is the official Tapo C200/P100 series announcement, not the verified first-sale date of the selected hardware revision or Australian variant. [https://www.tp-link.com/fr/press/news/18458/ Official Tapo series announcement at IFA] == Calculation cross-check == Device CRIS 2, 3, 1, 2, CATS 2. System CRIS 2, 1, 2, CATS 2. User Authentication CRIS 2, 2, 2, 2, 2, CATS 2. GRAS 6; expected Grade B. [https://fehmijaafar.net/wiki-iot/index.php/Methodology Methodology] == Historical vulnerabilities and remediation == === CVE-2026-12760: IPv4 fragmentation denial of service === * Affected scope: Vendor explicitly identifies C200 V3 and fixed build; earliest affected build unspecified. * Preconditions: Unauthenticated adjacent-network attacker delivering malformed packets. * Impact: Resource exhaustion and temporary loss of camera monitoring/recording. * Remediation: V3 1.4.4 Build 250922; match region. * Severity: CVSS 4.0: 7.1, vendor. * Evidence: [https://www.tp-link.com/us/support/faq/5143/ Tapo C200 V3 vulnerability] === Revision-matching exclusion === The 2024 protocol paper tested C200 hardware 1.0.0, not V3. Its detailed protocol results are excluded from this model-specific rating. [https://arxiv.org/html/2407.12159v1 Original P100/C200 protocol research]
For new submissions, pages will appear blank until approval.
Summary: This is a minor edit Watch this page
Save page Show preview Show changes Cancel
