TP-Link Warns of High-Risk Vulnerability in Dozens of Its Business Security Cameras

 

Some TP-Link Vigi security cameras, like the InSight S245ZI (pictured), are currently vulnerable to attackers.

If you use TP-Link Vigi cameras to monitor your business, you need to take immediate action. The networking hardware giant has disclosed a serious security flaw affecting more than 60 models of its professional surveillance cameras, which could allow attackers to hijack the devices completely.

The company issued a formal statement on its website, listing a wide range of Vigi business security cameras that are currently vulnerable to potential exploitation. The core of the problem lies in the password recovery feature.

The Nature of the Security Flaw

According to TP-Link’s security advisory, the vulnerability enables an attacker to bypass the authentication process during password recovery. This loophole could allow a malicious actor to reset the administrator password without authorization. Once this is done, the attacker gains full administrative access to the camera, its feed, and its settings—a severe breach that compromises both privacy and physical security.

To underscore the severity, TP-Link assessed the issue using the industry-standard Common Vulnerability Scoring System (CVSS) version 4.0, assigning it a high-risk score of 8.7 out of 10. This rating indicates an urgent need for remediation to prevent potential real-world attacks.

Which TP-Link Camera Models Are Affected?

The list of impacted devices is extensive, covering many popular business-focused series. Key affected lines include:

• The Vigi Cx40‑W series of outdoor cameras.
• The Vigi Cx40I (hardware versions 1.0 and 1.20) series.
• The Vigi InSight Sx45ZI series, which includes models like the Vigi Insight S445ZI (currently priced around $209.59 on Amazon).

With over 60 models identified, the scope is significant. TP-Link has created a dedicated support page with the complete list of vulnerable products, which you can find here. It is crucial for administrators to check this list against their installed equipment.

The Solution: Immediate Firmware Update

In response, TP-Link has swiftly developed and released critical firmware updates to patch the vulnerability. These updates are available now through the company’s official Download Center.

The remediation process is straightforward:

1. Visit the TP-Link Download Center.

2. Search for your specific Vigi camera model.

3. Download and install the latest firmware version provided.

The company emphasizes that affected users should apply these updates as soon as possible to secure their networks. For detailed step-by-step instructions and the official security FAQ, you can refer to TP-Link's dedicated bulletin.

What You Should Do Now

1. Identify Your Models: Check the serial numbers and model names of your deployed TP-Link Vigi cameras.
2. Consult the List: Verify if your equipment is listed on TP-Link’s advisory page.
3. Update Firmware: Immediately download and install the patch for every affected camera. This process typically involves logging into each camera’s web interface.
4. Review Security: Consider this a reminder to audit all connected devices on your network, ensure strong, unique passwords are in use, and enable automatic updates where available.

This incident serves as a critical reminder of the importance of proactive device management in an increasingly connected security landscape. Keeping firmware up-to-date is not just about new features—it's a fundamental component of your digital defense.

Source: TP-Link Security Advisory, SmartHome Assistent.