Exploit for Command Injection in Tp-Link Tapo_C200_Firmware CVE-2021-4045 CVE-2024-2188 CVE-2025-40634

Name: Exploit for Command Injection in Tp-Link Tapo_C200_Firmware CVE-2021-4045 CVE-2024-2188 CVE-2025-40634
Rating: 5 (200 reviews)

2025-11-23 | CVSS 10.0

## https://sploitus.com/exploit?id=4C5663C1-EB62-5077-9D1B-7AB77929421D
# CVEs

A repository to group the CVEs that I have discovered and their exploits:

- CVE-2025-40634: TP-Link archer ax50 wan stack-based buffer overflow
- CVE-2024-2188: TP-Link archer ax50 stored XSS via UPnP
- CVE-2021-4045: TP-Link tapo c200 unauthentiacted RCE