PT-2026-27163 · Tp Link · Archer Nx200+3

Saifeldeen Aziz · Publicado 2026-03-23 · Atualizado 2026-03-23 · CVE-2025-15518

Positive Technologies (AI Summary)

CVSS v4.0

8.5

Alta

Vetor base

AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TP-Link Archer NX200 TP-Link Archer NX210 TP-Link Archer NX500 TP-Link Archer NX600

Description A flaw exists in the handling of input within an administrative command-line interface (CLI) used for wireless control. This allows a specially crafted input to be executed as part of an operating system command. An attacker who is already authenticated and possesses administrative privileges can execute arbitrary commands on the system, potentially compromising the confidentiality, integrity, and availability of the device. The vulnerable component is a wireless-control administrative CLI command. The input is manipulated to be executed as part of an operating system command. The vulnerable parameters or variables are not specified.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2025-15518

Produtos afetados

Archer Nx200

Archer Nx210

Archer Nx500

Archer Nx600

Referências · 6

• https://tp-link.com/en/support/download/archer-nx210/#Firmware · Correção
• https://tp-link.com/us/support/faq/5027 · Aviso do Fabricante
• https://tp-link.com/en/support/download/archer-nx200/#Firmware · Correção
• https://tp-link.com/en/support/download/archer-nx600/#Firmware · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2025-15518 · Nota de Segurança
• https://tp-link.com/en/support/download/archer-nx500/#Firmware · Correção