These popular TP-Link home security cameras could be hacked to spy on you while you sleep, experts warn
- Cybersecurity company OPSWAT found a login bypass and a crash bug in TP-Link's Tapo C200 cameras
- TP-Link has extended that to include its C120 offering too
- Anyone on the same network could get admin access, live video, and recordings without requiring the owner's credentials
Security researchers at OPSWAT have detailed two high-severity flaws in TP-Link's Tapo C200, a pan-and-tilt indoor camera listed on Amazon for $26.99 and sold as a baby monitor and pet camera.
The more serious issue is that someone on the same network can log in as the camera's administrator without the password, accessing the live feed and stored recordings.
At least one other bug, which OPSWAT rates as critical in the same disclosure but does not detail, has not been published.
A localized login that requires no authentication
The TP-Link Tapo C200, as we noted in previous coverage of the incident,isn't just another security camera...
Copyright of this story solely belongs to www.techradar.com. To see the full text click HERE
