PT-2026-5314 · Unknown · Backuprestore

Nicola Giuffrida · Publicado 2026-01-29 · Atualizado 2026-03-09 · CVE-2025-15545

Positive Technologies (AI Summary)

CVSS v4.0

7.3

Alta

Vetor base

AV:A/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions versions prior to 2.3

Description The backup restore function does not properly validate unexpected or unrecognized tags within the backup file. When a crafted file is restored, the injected tag is interpreted by a shell, allowing execution of arbitrary commands with root privileges. Successful exploitation allows an attacker to gain root-level command execution, compromising confidentiality, integrity, and availability. The vulnerability allows for the execution of arbitrary commands via the /api/v1/restore endpoint using a crafted backup file containing malicious tags. The vulnerable parameter is the backup file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2025-15545

Produtos afetados

Backuprestore

Referências · 11

• 🔥 https://nico-security.com/posts/cve-2025-15545 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-15545 · Nota de Segurança
• https://tp-link.com/en/support/download/re605x/v3/#Firmware · Correção
• https://twitter.com/CVEnew/status/2016934793640906940 · Publicação no Twitter
• https://twitter.com/dailycve/status/2031114628877451633 · Publicação no Twitter
• https://t.me/cveNotify/154822 · Publicação no Telegram
• https://tp-link.com/us/support/download/re605x/v3/#Firmware · Correção
• https://twitter.com/VulmonFeeds/status/2016970651974660417 · Publicação no Twitter
• https://t.me/cveNotify/150483 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-15545 · Aviso do Fabricante
• https://tp-link.com/us/support/faq/4929 · Aviso do Fabricante