The vulnerability allows an unauthenticated attacker to issue an onboarding connect request over HTTPS, overriding the device’s wireless settings. By supplying unauthorized network credentials, the camera disconnects from its configured network and attempts to join an attacker‑controlled network, rendering it unreachable over its management interface. This change in configuration directly compromises availability of the device’s administrative functions without altering any other system state.

TP‑Link Systems Inc. equipment affected include the Tapo C120 model version 1 and the Tapo C200 model version 5. No other firmware revisions are listed as impacted by this issue.

The CVSS score of 7.1 indicates a high potential impact if exploited. No EPSS score is currently published, but the flaw does not require privileged access and can be triggered by any attacker on the same local network or physically near the device. The vulnerability is not yet listed in CISA’s KEV catalog, suggesting no known widespread field exploitation, yet the attack path is straightforward and the device would be immediately disconnected upon exploitation, creating a denial‑of‑service condition.