CVE-2025-15518
Last modified
CVE-2025-15518 is a high-severity vulnerability rated 7.2/10 on the CVSS scale. Improper input handling in a wireless-control administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may execute arbitrary commands on the operating system, impacting the confidentiality, integrity, and availability of the device.. EPSS estimates a 0.62% chance of exploitation in the next 30 days.
Description
Improper input handling in a wireless-control administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may execute arbitrary commands on the operating system, impacting the confidentiality, integrity, and availability of the device.
Metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Tp-Link | Archer Nx600 Firmware | < 1.3.0 |
| Tp-Link | Archer Nx500 Firmware | < 1.5.0 |
| Tp-Link | Archer Nx210 Firmware | < 1.3.0 |
| Tp-Link | Archer Nx200 Firmware | < 1.3.0 |
| Tp-Link | Archer Nx600 Firmware | < 1.4.0 |
| Tp-Link | Archer Nx500 Firmware | < 1.3.0 |
| Tp-Link | Archer Nx200 Firmware | < 1.8.0 |
References
- https://www.tp-link.com/us/support/faq/5027/Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-15518?
How severe is CVE-2025-15518?
How do I fix CVE-2025-15518?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-15512The Aplazo Payment Gateway plugin for WordPress is vulnerabl…5.3
- CVE-2025-15513The Float Payment Gateway plugin for WordPress is vulnerable…5.3
- CVE-2025-15514Ollama 0.11.5-rc0 through current version 0.13.5 contain a n…7.5
- CVE-2025-15515The authentication mechanism for a specific feature in the E…5.5
- CVE-2025-15516The All-in-One Video Gallery plugin for WordPress is vulnera…4.3
- CVE-2025-15517A missing authentication check in the HTTP server on TP-Link…8.1
- CVE-2025-15519Improper input handling in a modem-management administrative…7.2
- CVE-2025-15520The RegistrationMagic WordPress plugin before 6.0.7.2 check…4.3
- CVE-2025-15521The Academy LMS – WordPress LMS Plugin for Complete eLearnin…9.8
- CVE-2025-15522The Uncanny Automator – Easy Automation, Integration, Webhoo…6.4
- CVE-2025-15523MacOS version of Inkscape bundles a Python interpreter that …4.8
- CVE-2025-15524The Gallery by FooGallery plugin for WordPress is vulnerable…4.3
Are you affected by CVE-2025-15518?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST