CVE-2025-15607: high-severity vulnerability in TP-Link Systems Inc. AX53 v1
Authenticated Command Injection in mcsd Service of TP-Link Archer AX53
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
An authenticated user can inject malicious commands into the TP-Link Archer AX53 router's mscd service through improperly validated debug functions, allowing them to execute arbitrary commands and take full control of the device.
CWE-77 command injection exists in the mscd debug functionality due to insufficient input validation on log redirection parameters and unvalidated file content concatenation into shell commands. An authenticated attacker can exploit this to execute arbitrary system commands with device-level privileges, leading to complete device compromise.
In the same product, most dangerous first.