VULNERABILITY INTELLIGENCE

CVE-2025-14300

CVSS score8.7 HIGH

EPSS probability0.37%

CISA KEVNot currently listed

Published2025-12-20

Last modified2026-09-30

Description

The HTTPS service on Tapo C200 v3, v5, C425 v1.2 and C100 v5 exposes a connectAP interface without proper authentication. An unauthenticated attacker on the same local network segment can exploit this to modify the device’s Wi-Fi configuration, resulting in loss of connectivity and denial-of-service (DoS).