CVE-2025-1099

Name of the Vulnerable Software and Affected Versions Tapo C500 Wi-Fi camera (affected versions not specified)

Description This issue exists due to a hard-coded RSA private key embedded within the device firmware. An attacker with physical access could exploit this to obtain cryptographic private keys, which can then be used for impersonation, data decryption, and man-in-the-middle attacks on the targeted device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.