PT-2026-5323 · Vx800V · Vx800V

Published 2026-01-29 · Updated 2026-03-09 · CVE-2025-15548

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions VX800v version 1.0

Description The web interface of VX800v version 1.0 transmits sensitive information over unencrypted HTTP due to missing application layer encryption. This allows a network-adjacent attacker to intercept the traffic and compromise its confidentiality. The affected endpoints include web interface endpoints.

Recommendations Apply application layer encryption to the web interface endpoints.

Fix

Missing Encryption of Sensitive Data

Weakness Enumeration

CWE-311

Related Identifiers

CVE-2025-15548

Affected Products

Vx800V

References · 7

• https://tp-link.com/de/support/download/vx800v/#Firmware · Patch
• https://osv.dev/vulnerability/CVE-2025-15548 · Vendor Advisory
• https://tp-link.com/us/support/faq/4930 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-15548 · Security Note
• https://t.me/cveNotify/154841 · Telegram Post
• https://twitter.com/CVEnew/status/2016948635859100108 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2017037210847961299 · Twitter Post