← Database

CVE-2025-15518

HIGH CVSS: 7.2 Published: 2026-03-23 Modified: 2026-06-17

Description

Improper input handling in a wireless-control administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may execute arbitrary commands on the operating system, impacting the confidentiality, integrity, and availability of the device.

Affected Platforms

Tp-Link Archer Nx600Tp-Link Archer Nx500Tp-Link Archer Nx200Tp-Link Archer Nx210 FirmwareTp-Link Archer Nx500 FirmwareTp-Link Archer Nx210Tp-Link Archer Nx600 FirmwareTp-Link Archer Nx200 Firmware

Weakness Type

CWE-78

References