PT-2026-5319 · Vx800V · Vx800V

Published 2026-01-29 · Updated 2026-03-09 · CVE-2025-13399

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VX800v version 1.0

Description A flaw exists in the application layer encryption of the web interface, allowing a nearby attacker to compromise the weak AES key and decrypt intercepted traffic. Exploitation requires network proximity and does not require authentication. Successful exploitation could lead to a significant impact on the confidentiality, integrity, and availability of transmitted data. The affected API endpoint is not specified. The vulnerable variable is not specified. The vulnerable function is not specified.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Fix

Weakness Enumeration

CWE-331

Related Identifiers

CVE-2025-13399

Affected Products

Vx800V

References · 6

• https://tp-link.com/de/support/download/vx800v/#Firmware · Patch
• https://osv.dev/vulnerability/CVE-2025-13399 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-13399 · Security Note
• https://tp-link.com/us/support/faq/4930 · Vendor Advisory
• https://t.me/cveNotify/154837 · Telegram Post
• https://twitter.com/CVEnew/status/2016948639935992136 · Twitter Post