# CVE-2025-14300: TP-Link Tapo Camera HTTPS service authentication bypass in connectAP interface

Source: https://junglewise.ai/threats/cve-2025-14300-tp-link-tapo-camera-https-service-authentication-bypass-in  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-12-20. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2025-14300 · Severity: high · CVSS 8.1 · Published 2025-12-20

TP-Link Tapo security cameras (C200, C425, C100 models) expose an unauthenticated Wi-Fi configuration interface accessible over HTTPS to devices on the local network. An attacker on the same network can reconfigure the camera's Wi-Fi settings without needing any credentials, causing it to disconnect from the network and become unusable until manually reconfigured.

Technologies: [TP-Link Tapo C100](https://junglewise.ai/threats/technologies/tapo-c100), [TP-Link Tapo C200](https://junglewise.ai/threats/technologies/tapo-c200). Vendors: [TP-Link](https://junglewise.ai/threats/vendors/tp-link).

## Quick answers

**Is CVE-2025-14300 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-14300 being exploited in the wild.

**How severe is CVE-2025-14300?** High severity, with a CVSS score of 8.1, published 20 December 2025.

**Which products and versions are affected?** TP-Link Tapo C100 v5; TP-Link Tapo C200 v3, v5; TP-Link Tapo C425 v1.2.

**Is there a fix for CVE-2025-14300?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2025-14300 attacked?** It is attacked from the adjacent network, in a network appliance.

**Am I affected by CVE-2025-14300?** Check whether you run TP-Link Tapo C100, TP-Link Tapo C200 or TP-Link Tapo C425 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is an authentication bypass in the connectAP interface exposed by the HTTPS service on affected Tapo camera models. The root cause is insufficient access control on a Wi-Fi configuration endpoint that should require authentication. An unauthenticated attacker on the same local network segment can send requests to modify the device's Wi-Fi configuration parameters, resulting in loss of network connectivity. Attack preconditions are minimal: attacker must be on the adjacent network segment (local LAN). The impact is denial of service, as the affected camera loses connectivity and cannot be accessed remotely until reconnected manually. A patch is expected to introduce proper authentication checks on the connectAP interface.

## Affected products

- TP-Link Tapo C200 v3, v5
- TP-Link Tapo C425 v1.2
- TP-Link Tapo C100 v5

## Timeline

- 2025-12-20: disclosed: CVE-2025-14300 published

## References

- [https://www.tp-link.com/en/support/download/tapo-c100/v5/](https://www.tp-link.com/en/support/download/tapo-c100/v5/)
- [https://www.tp-link.com/en/support/download/tapo-c200/v3/](https://www.tp-link.com/en/support/download/tapo-c200/v3/)

## Related threats

- [TP-Link Tapo C120 v1 and C200 v5 NULL pointer dereference](https://junglewise.ai/threats/cve-2026-9032-tapo-c120-v1-and-c200-v5-contain-a-null-pointer-dereference-in-the)
- [TP-Link Tapo C120/C200 authentication bypass in HTTPS onboarding](https://junglewise.ai/threats/cve-2026-78578-tapo-c120-v1-and-c200-v5-do-not-enforce-authentication-for-do)
- [TP-Link Tapo C120 v1 and C200 V5 authentication bypass in onboarding scan](https://junglewise.ai/threats/cve-2026-78577-tapo-c120-v1-and-c200-v5-contain-a-vulnerability-in-the-https)
- [TP-Link Tapo C120 and C200 authentication bypass and command execution](https://junglewise.ai/threats/cve-2026-102369-tapo-c120-v1-and-c200-v5-do-not-adequately-protect-login)
- [Tapo C100/C101 V5 contains a heap-based buffer overflow vulnerability in the RTSP service. An authenticated attacker…](https://junglewise.ai/threats/cve-2026-75619-tapo-c100-c101-v5-contains-a-heap-based-buffer-overflow)