PT-2026-27164 · Tp Link · Archer Nx200+3

Saifeldeen Aziz · Published 2026-03-23 · Updated 2026-03-28 · CVE-2025-15519

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TP-Link Archer NX200 TP-Link Archer NX210 TP-Link Archer NX500 TP-Link Archer NX600

Description A flaw exists in how input is handled within an administrative command-line interface (CLI) used for modem management. This allows a specially crafted input to be executed as part of an operating system command. An attacker who is already authenticated and has administrative privileges can execute arbitrary commands on the system, potentially compromising the confidentiality, integrity, and availability of the device. The vulnerable component is a modem-management administrative CLI command.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2025-15519

Affected Products

Archer Nx200

Archer Nx210

Archer Nx500

Archer Nx600

References · 7

• https://tp-link.com/us/support/faq/5027 · Vendor Advisory
• https://tp-link.com/en/support/download/archer-nx210/#Firmware · Patch
• https://tp-link.com/en/support/download/archer-nx200/#Firmware · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-15519 · Security Note
• https://tp-link.com/en/support/download/archer-nx500/#Firmware · Patch
• https://tp-link.com/en/support/download/archer-nx600/#Firmware · Patch
• https://twitter.com/HostingTechNet/status/2037791089159995579 · Twitter Post