CVE-2025-15518
Command Injection in Wireless Control CLI on TP-Link Archer NX200, NX210, NX500 and NX600
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 1.3.0 Build 260309, 1.3.0 Build 260311, 1.4.0 Build 260311, < 1.5.0 Build 260309, < 1.3.0 Build 260309, and 1 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: none
- Automatable: no
- Technical impact: total
Summary
Improper input handling in a wireless-control administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may execute arbitrary commands on the operating system, impacting the confidentiality, integrity, and availability of the device.
Timeline
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: total
- CVE published
- Record last updated
Affected versions
- TP-Link Systems Inc. Archer NX600 v3.0
fixed in 1.3.0 Build 260309
- TP-Link Systems Inc. Archer NX600 v2.0
fixed in 1.3.0 Build 260311
- TP-Link Systems Inc. Archer NX600 v1.0
fixed in 1.4.0 Build 260311
- TP-Link Systems Inc. Archer NX500 v2.0
fixed in < 1.5.0 Build 260309
- TP-Link Systems Inc. Archer NX500 v1.0
fixed in 1.3.0 Build 260311
- TP-Link Systems Inc. Archer NX210 v3.0
fixed in 1.3.0 Build 260309
- TP-Link Systems Inc. Archer NX210 v2.0 v2.20
fixed in 1.3.0 Build 260311
- TP-Link Systems Inc. Archer NX200 v3.0
fixed in < 1.3.0 Build 260309
- TP-Link Systems Inc. Archer NX200 v2.20
fixed in 1.3.0 Build 260311
- TP-Link Systems Inc. Archer NX200 v2.0
fixed in 1.3.0 Build 260311
- TP-Link Systems Inc. Archer NX200 v1.0
fixed in 1.8.0 Build 260311