Many TP-Link cameras affected by security vulnerability

TP-Link has flagged an issue with a range of its security cameras. In a recent statement on the brand’s website, it lists more than 60 Vigi models, for business use, which are currently vulnerable to possible attacks.

According to TP-Link, an attacker could bypass the authentication process in the password recovery feature, allowing them to reset the admin password. As such, the attacker could gain full access to the Vigi camera, compromising your security. Using the Common Vulnerability Scoring System (CVSS) v4.0, TP-Link has rated this issue as high risk, with a score of 8.7 out of 10.

The list of affected TP-Link security cameras includes the Vigi Cx40‑W series, the Vigi Cx40I (1.0 and 1.20) series and the Vigi InSight Sx45ZI series (Vigi Insight S445ZI curr. $209.59 at Amazon Marketplace). You can find the complete list of affected products on the brand’s dedicated support page.

To resolve this problem, TP-Link has released a range of firmware updates for the Vigi security cameras. These can be found in the company’s Download Center, where you can search for your model. The company recommends that affected users take action as soon as possible.