TP-Link Tapo C200 Wi-Fi Camera

From Wiki-IoT
Revision as of 09:49, 23 October 2026 by Solarprince (talk | contribs) (Created page with "{{Classification |name=TP-Link Tapo C200 Pan/Tilt Home Security Wi-Fi Camera |brand=TP-Link (Tapo) |parent_company=TP-Link Technologies Co., Ltd. |website=https://www.tapo.com...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)



TP-Link Tapo C200 Wi-Fi Camera
Security Grade
   
     C
Calculator v
TP-Link Tapo C200 Pan/Tilt Home Security Wi-Fi Camera
   Category: Security camera • Model / Gen: Original C200 (multiple hardware versions) Tapo C200

   Release Date: 2020-09-01 • Status: In sale

   Classification Date:  • Official Website

Security Evaluation

1. Device Security

Criterion Value Proof Comment
Known hardware tampering Rare 🔗 Proof Standard indoor camera; disassembly needed to access internals.
Known vulnerabilities Very common [1][ https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2021-4045][2]🔗 Proof CVE-2021-4045 unauth RCE; CVE-2025-8065 RCE; CVE-2025-14300 auth bypass; CVE-2026-15315 replay auth bypass.
Prior attacks Very common 🔗 Proof Mass-scanned consumer camera repeatedly weaponized on the LAN.
Updatability Rare 🔗 Proof Patches released but older hardware versions lag and some reach EOL.
Category Score Score: 3 / 3

2. System Security

Criterion Value Proof Comment
Authentication with other systems Partial 🔗 Proof TP-Link ID cloud account; weak local ONVIF authentication.
Communications Encrypted with up-to-date encryption 🔗 Proof AES-128 / TLS 1.2 cloud channel.
Storage Encrypted with obselete encryption 🔗 Proof Local SD recording not strongly encrypted at rest.
Category Score Score: 2 / 3

3. User Authentication

Criterion Value Proof Comment
Account management Basic 🔗 Proof TP-Link ID account management.
Authentication Basic — Cloud account; device-local authentication bypass exists (CVE-2026-15315).
Brute-force protection Basic 🔗 Proof Cloud rate limiting; device-side protection weak.
Event logging Partial logging 🔗 Proof Limited event history in the app.
Passwords Require change after setup 🔗 Proof TP-Link ID set at setup; no on-device default credential.
Category Score Score: 2 / 3

Technical Specifications

Property Details
Operating System & App (Companion App: )
Hardware (CPU / GPU) CPU: • GPU:
Memory & Storage Memory: • Storage:
Power, Battery & Charging Battery: No (mains powered) • Power: 9V DC power adapter (mains) • Charging: No
Display & Camera Display: No • Camera: Yes, 1080p pan/tilt, IR night vision; microSD slot
Sound & Connectivity Sound: Yes (microphone + speaker, 2-way audio) • Connectivity: Wi-Fi 2.4 GHz 802.11b/g/n
Physical (Dimensions & Mass) Dimensions: • Mass:


Retrieved from "http://fehmijaafar.net/wiki-iot/index.php?title=TP-Link_Tapo_C200_Wi-Fi_Camera&oldid=8957"