PT-2026-27163 · Tp Link · Archer Nx200+3

Saifeldeen Aziz · Published 2026-03-23 · Updated 2026-03-23 · CVE-2025-15518

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TP-Link Archer NX200 TP-Link Archer NX210 TP-Link Archer NX500 TP-Link Archer NX600

Description A flaw exists in the handling of input within an administrative command-line interface (CLI) used for wireless control. This allows a specially crafted input to be executed as part of an operating system command. An attacker who is already authenticated and possesses administrative privileges can execute arbitrary commands on the system, potentially compromising the confidentiality, integrity, and availability of the device. The vulnerable component is a wireless-control administrative CLI command. The input is manipulated to be executed as part of an operating system command. The vulnerable parameters or variables are not specified.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2025-15518

Affected Products

Archer Nx200

Archer Nx210

Archer Nx500

Archer Nx600

References · 6

• https://tp-link.com/en/support/download/archer-nx210/#Firmware · Patch
• https://tp-link.com/us/support/faq/5027 · Vendor Advisory
• https://tp-link.com/en/support/download/archer-nx200/#Firmware · Patch
• https://tp-link.com/en/support/download/archer-nx600/#Firmware · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-15518 · Security Note
• https://tp-link.com/en/support/download/archer-nx500/#Firmware · Patch