Unit 515

OPSWAT Unit 515 researchers have uncovered a command injection vulnerability that, when chained with a previously disclosed authentication bypass, enables an unauthenticated attacker on the same local network to execute operating system commands on affected TP-Link Tapo cameras.