Deviceways

Security camera

TP-Link Tapo C210

Contribute

Projects for this device

Replacement firmware

Replace supported camera firmware with local RTSP and ONVIF video, browser controls and recording to an SD card or network storage.

How to get started

Match the camera’s hardware to the supported list and follow its installation page. The method may use an SD installer, USB Cloner, serial access or a flash programmer.

Setup
Replacement firmware; model-specific flashing method
You’ll need
Exact listed processor, image sensor and Wi-Fi combination; equipment specified in its model guide.

Published build · 4 Oct 2026

Get configurationgithub.com
Original project github.com
Configured features
Audio, Memory-card support
Sources
Community modification
Experimental

Find cat visits and make captioned clips from camera footage. The operator used coding assistants to build the system.

How to get started

Adapt the published Frigate/go2rtc setup on a separate computer; the optional vision-and-caption pipeline needs custom scripting and model access.

Setup
External computer + camera streams
You’ll need
Working local stream; separate computer.
Original project helencam.comInstallation guide helencam.com
App or integration

Bring live video and camera controls into Home Assistant.

How to get started

Install through HACS, then add the camera account and enable third-party compatibility in Tapo.

Setup
Home Assistant integration
You’ll need
Camera account; third-party access enabled.
Original project github.com

Hardware details

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

CVSS 8.8 (v3.0)

Tapo C210

TP-Link Tapo C210 Password Recovery Authentication Bypass Vulnerability

CVE-2023-35717

Affected firmware
1.3.0 Build 220830 Rel.69909n (release 2022-09-22)
Fix
Fix details in the linked record
Read zdi CVE record
Details and sources
Public disclosure CVE updated

TP-Link Tapo C210 Password Recovery Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of TP-Link Tapo C210 IP cameras. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the password recovery mechanism. The issue results from reliance upon the secrecy of the password derivation algorithm when generating a recovery password. An attacker can leverage this vulnerability to bypass authentication on the system. . Was ZDI-CAN-20484.

ZDI-23-895 — Tapo C210 (zerodayinitiative.com) ↗
CVE published

CVSS 6.8 (v3.0)

Tapo C210

TP-Link Tapo C210 ActiveCells Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVE-2023-41184

Affected firmware
1.3.0 Build 220830 Rel.69909n (release 2022-09-22)
Fix
Fix details in the linked record
Read zdi CVE record
Details and sources
Public disclosure CVE updated

TP-Link Tapo C210 ActiveCells Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Tapo C210 IP cameras. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.

The specific flaw exists within the handling of the ActiveCells parameter of the CreateRules and ModifyRules APIs. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. . Was ZDI-CAN-20589.

ZDI-23-1287 — Tapo C210 (zerodayinitiative.com) ↗
Check more security advisories for this device · CVE.org