Deviceways

Security camera

TP-Link Tapo C210 v3

Contribute

Projects for this device

Replacement firmware
Partial support documented

Replace supported camera firmware with local RTSP and ONVIF video, browser controls and recording to an SD card or network storage.

How to get started

Match the camera’s hardware to the supported list and follow its installation page. The method may use an SD installer, USB Cloner, serial access or a flash programmer.

Setup
Replacement firmware; model-specific flashing method
You’ll need
Exact listed processor, image sensor and Wi-Fi combination; equipment specified in its model guide.

Published build · 4 Oct 2026

Get configurationgithub.com
Original project github.com
Configured features
Audio, Memory-card support
Sources

Hardware details

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

CVSS 7.1 (v4.0)

Tapo C210 v3

Unauthenticated Denial of Service via Oversized URL in HTTP Parser on TP-Link Tapo C210, C220 & C520WS

CVE-2026-0919

Affected firmware
Before 1.2.6 Build 260328
Fix
Fix details in the linked record
Read TPLink CVE record
Details and sources
CVE updated

The HTTP parser of Tapo C210 v3, C220 v1 and C520WS v2 cameras improperly handles requests containing an excessively long URL path. An invalid‑URL error path continues into cleanup code that assumes allocated buffers exist, leading to a crash and service restart. An unauthenticated attacker can force repeated service crashes or device reboots, causing denial of service.

Check more security advisories for this device · CVE.org