The vulnerability is an authenticated stack-based buffer overflow located in the local Wi‑Fi onboarding configuration path of TP‑Link Tapo C320WS, v2.0 firmware. An attacker who can authenticate on the adjacent local network can submit a crafted request containing an oversized encrypted password field. The overflow corrupts stack state, allowing execution of arbitrary commands with root privileges. This grants complete control of the device, enabling modification of camera behavior, access to confidential local settings, and disruption of availability.

Affected product is TP‑Link Systems Inc.’s Tapo C320WS, version 2.0 firmware. No other versions or variants are listed.

The CVSS score of 8.5 designates high severity. EPSS information is not available, and the vulnerability is not listed in the CISA KEV catalog, indicating no confirmed widespread exploitation yet. However, an authenticated attacker on the same local network can exploit the flaw by submitting a malicious payload through the device’s local Wi‑Fi onboarding interface, satisfying the requirement that the attacker have network access but not administrative privileges beyond local authentication. The exploit would erase the stack, allowing arbitrary command execution as root, resulting in full compromise of the device.