CVE-2025-15517: high-severity vulnerability in TP-Link Systems Inc. Archer NX200 v1.0
Authorization Bypass in HTTP Server Endpoints on TP-Link Archer NX200, NX210, NX500 and NX600
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
The TP-Link Archer routers (NX200, NX210, NX500, NX600) have a flaw where certain functions skip authentication checks, letting anyone access admin features like firmware uploads and settings changes without logging in.
Missing authentication validation in HTTP CGI endpoints allows unauthenticated remote attackers to execute privileged operations including firmware upload and configuration modifications. Pre-condition: network accessibility to the HTTP server; impact includes complete router compromise and arbitrary code execution.
In the same product, most dangerous first.