CVE-2025-15608: fallo de gravedad alta en TP-Link Systems Inc. AX53 v1
Buffer Overflow in Network Probe Handling Function of TP-Link Archer AX53 + Archer AX55
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.7epss 0.6%
This vulnerability in AX53 v1, AX55 v4 and AX55 v4.6 results from insufficient input sanitization in the device’s probe handling logic, where unvalidated parameters can trigger a stack-based buffer overflow that causes the affected service to crash and, under specific conditions, may enable remote code execution through complex heap-spray techniques.
Successful exploitation may result in repeated service unavailability and, in certain scenarios, allow an attacker to gain control of the device.
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
Productos afectados
TP-Link Systems Inc. · AX53 v1TP-Link Systems Inc. · AX55 v4TP-Link Systems Inc. · AX55 v4.6CVEs relacionadas — TP-Link Systems Inc. AX53 v1
En el mismo producto, de las más peligrosas a las menos.
Referencias
https://www.tp-link.com/en/support/download/archer-ax53/v1/#Firmwarehttps://www.tp-link.com/en/support/download/archer-ax55/v4/https://www.tp-link.com/us/support/download/archer-ax55/v4.60/#Firmwarehttps://www.tp-link.com/us/support/download/archer-ax55/v4/#Firmwarehttps://www.tp-link.com/us/support/faq/5025/