An authenticated format string vulnerability (CWE-134) exists in the ONVIF service of TP-Link Tapo C110 v2 due to improper handling of user-controlled input. The vulnerability allows an attacker with authentication to supply externally controlled data interpreted as a format string, enabling manipulation of stack memory including control flow data such as return addresses. This can be exploited to redirect execution flow to internal functions, triggering an unauthorized factory reset and resulting in loss of device configuration, credential deletion, and service disruption. The vulnerability has a CVSS 4.0 score of 7.0 (high severity). No patch or official remediation guidance is currently provided by the vendor. The product is not a cloud service, so remediation depends on vendor updates.

Successful exploitation requires authentication and can cause an unauthorized factory reset of the device. This leads to loss of configuration settings, deletion of stored credentials, and disruption of service availability. The vulnerability affects device integrity and availability but does not indicate confidentiality impact. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the ONVIF service to trusted users only and monitor for unauthorized access attempts. No official fix or temporary mitigation has been published by TP-Link at this time.