CVE-2020-11445: TP-Link KC200 Firmware

Medium severity, CVSS 5.3. EPSS: 1.8% chance of exploitation in the next 30 days.

TP-Link cloud cameras through 2020-02-09 allow remote attackers to bypass authentication and obtain sensitive information via vectors involving a Wi-Fi session with GPS enabled, aka CNVD-2020-04855.

Affected products

• TP-Link KC200 Firmware: up to and including 2020-02-09
• TP-Link KC300S2 Firmware: up to and including 2020-02-09
• TP-Link KC310S2 Firmware: up to and including 2020-02-09
• TP-Link NC200 Firmware: up to and including 2020-02-09
• TP-Link NC210 Firmware: up to and including 2020-02-09
• TP-Link NC220 Firmware: up to and including 2020-02-09
• TP-Link NC230 Firmware: up to and including 2020-02-09
• TP-Link NC250 Firmware: up to and including 2020-02-09
• TP-Link NC260 Firmware: up to and including 2020-02-09
• TP-Link NC450 Firmware: up to and including 2020-02-09
• TP-Link Tapo c100 Firmware: up to and including 2020-02-09
• TP-Link Tapo c200 Firmware: up to and including 2020-02-09
• TP-Link Tl-SC3430 Firmware: up to and including 2020-02-09
• TP-Link Tl-SC3430N Firmware: up to and including 2020-02-09
• TP-Link Tl-SC4171G Firmware: up to and including 2020-02-09

Published 2020-04-01. Last modified 2026-06-17.