cvedb.io
CVE-2025-1099
UNKNOWN · CVSS n/a
EPSS exploitation probability: 0%
Published 2025-02-10T11:15:21.147 · Last modified 2026-06-17T08:38:22.987

Summary

This vulnerability exists in Tapo C500 Wi-Fi camera due to hard-coded RSA private key embedded within the device firmware. An attacker with physical access could exploit this vulnerability to obtain cryptographic private keys which can then be used to perform impersonation, data decryption and man in the middle attacks on the targeted device.

Does this affect you?

Add your gear to cvedb and we'll alert you only when a vendor you run ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.