This vulnerability arises from insufficient validation of encrypted credential data input in the Tapo C200 v5 configuration service. An attacker can send oversized encrypted ciphertext values that trigger exception handling failures, causing the device to crash or reboot. This disrupts HTTPS management and monitoring functionality temporarily, leading to a denial-of-service condition until the service recovers. No known exploits are reported in the wild. The CVSS 4.0 base score is 7.1, indicating high severity with attack vector being adjacent network and no privileges or user interaction required.

Successful exploitation results in temporary denial-of-service by crashing or restarting the affected device, disrupting HTTPS management and monitoring capabilities until recovery. There is no indication of data compromise or persistent control loss.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround information is provided at this time.