ICSA-26-036-01
·
Published 2026-02-11
·
View on CISA ICS-CERT ↗
TP-Link Systems Inc. VIGI Series IP Camera
CVSS 8.8
HIGH
Risk Summary
Successful exploitation of this vulnerability could result in unauthorized users gaining administrative access to affected closed circuit television cameras.
CVEs (1)
Remediations
- TP-Link Systems Inc. strongly recommends that users with affected devices take the following actions:
- Download and update to the latest firmware version to fix the vulnerability from the following links.
- United States users should visit the TP-Link US Download Center here: https://www.vigi.com/us/support/download/.
- Global English users should visit the TP-Link EN Download Center:https://www.vigi.com/es/support/download/.
- India users should visit the TP-Link India Download Center:https://www.vigi.com/in/support/download/.
- Please visit https://www.tp-link.com/us/support/faq/4906/ for the TP-Link advisory.
Affected Vendors
TP-Link Systems Inc.
Affected Products (32)
TP-Link Systems Inc.
·
VIGI Cx45 Series Models C345, C445
<=3.1.0_Build_250820_Rel.57668n
TP-Link Systems Inc.
·
VIGI Cx55 Series Models C355, C455
<=3.1.0_Build_250820_Rel.58873n
TP-Link Systems Inc.
·
VIGI Cx85 Series Models C385, C485
<=3.0.2_Build_250630_Rel.71279n
TP-Link Systems Inc.
·
VIGI C340S Series
<=3.1.0_Build_250625_Rel.65381n
TP-Link Systems Inc.
·
VIGI C540S Series Models C540S, EasyCam C540S
<=3.1.0_Build_250625_Rel.66601n
TP-Link Systems Inc.
·
VIGI C540V Series
<=2.1.0_Build_250702_Rel.54300n
TP-Link Systems Inc.
·
VIGI C250 Series
<=2.1.0_Build_250702_Rel.54301n
TP-Link Systems Inc.
·
VIGI Cx50 Series Models C350, C450
<=2.1.0_Build_250702_Rel.54294n
TP-Link Systems Inc.
·
VIGI Cx20I (1.0) Series Models C220I 1.0, C320I 1.0, C420I 1.0
<=2.1.0_Build_251014_Rel.58331n
TP-Link Systems Inc.
·
VIGI Cx20I (1.20) Series Models C220I 1.20, C320I 1.20, C420I 1.20
<=2.1.0_Build_250701_Rel.44071n
TP-Link Systems Inc.
·
VIGI Cx30I (1.0) Series Models C230I 1.0, C330I 1.0, C430I 1.0
<=2.1.0_Build_250701_Rel.45506n
TP-Link Systems Inc.
·
VIGI Cx30I (1.20) Series Models C230I 1.20, C330I 1.20, C430I 1.20
<=2.1.0_Build_250701_Rel.44555n
TP-Link Systems Inc.
·
VIGI Cx30 (1.0) Series Models C230 1.0, C330 1.0, C430 1.0
<=2.1.0_Build_250701_Rel.46796n
TP-Link Systems Inc.
·
VIGI Cx30 (1.20) Series Models C230 1.20, C330 1.20, C430 1.20
<=2.1.0_Build_250701_Rel.46796n
TP-Link Systems Inc.
·
VIGI Cx40I (1.0) Series Models C240I 1.0, C340I 1.0, C440I 1.0
<=2.1.0_Build_250701_Rel.46003n
TP-Link Systems Inc.
·
VIGI Cx40I (1.20) Series Models C240I 1.20, C340I 1.20, C440I 1.20
<=2.1.0_Build_250701_Rel.45041n
TP-Link Systems Inc.
·
VIGI C230I Mini Series
<=2.1.0_Build_250701_Rel.47570n
TP-Link Systems Inc.
·
VIGI C240 1.0 Series
<=2.1.0_Build_250701_Rel.48425n
TP-Link Systems Inc.
·
VIGI C340 2.0 Series
<=2.1.0_Build_250701_Rel.49304n
TP-Link Systems Inc.
·
VIGI C440 2.0 Series
<=2.1.0_Build_250701_Rel.49778n
TP-Link Systems Inc.
·
VIGI C540 2.0 Series
<=2.1.0_Build_250701_Rel.50397n
TP-Link Systems Inc.
·
VIGI C540‑4G Series
<=2.2.0_Build_250826_Rel.56808n
TP-Link Systems Inc.
·
VIGI Cx40‑W Series Models C340‑W 2.0/2.20, C440‑W 2.0, C540‑W 2.0
<=2.1.1_Build_250717
TP-Link Systems Inc.
·
VIGI Cx20 Series Models C320, C420
<=2.1.0_Build_250701_Rel.39597n
TP-Link Systems Inc.
·
VIGI InSight Sx45 Series Models S245, S345, S445
<=3.1.0_Build_250820_Rel.57668n
TP-Link Systems Inc.
·
VIGI InSight Sx55 Series Models S355, S455
<=3.1.0_Build_250820_Rel.58873n
TP-Link Systems Inc.
·
VIGI InSight Sx85 Series Models S285, S385
<=3.0.2_Build_250630_Rel.71279n
TP-Link Systems Inc.
·
VIGI InSight Sx45ZI Series Models S245ZI, S345ZI, S445ZI
<=1.2.0_Build_250820_Rel.60930n
TP-Link Systems Inc.
·
VIGI InSight Sx85PI Series Models S385PI, S485PI
<=1.2.0_Build_250827_Rel.66817n
TP-Link Systems Inc.
·
VIGI InSight S655I Series
<=1.1.1_Build_250625_Rel.64224n
TP-Link Systems Inc.
·
VIGI InSight S345‑4G Series
<=2.1.0_Build_250725_Rel.36867n
TP-Link Systems Inc.
·
VIGI InSight Sx25 Series Models S225, S325, S425
<=1.1.0_Build_250630_Rel.39597n
Affected Sectors
Commercial Facilities
Get alerted to advisories like this
OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.
Start free trial Learn more