CVE-2025-15543 in VX800v

Résumé

par MITRE • 29/01/2026

Improper link resolution in USB HTTP access path in VX800v v1.0 allows a crafted USB device to expose root filesystem contents, giving an attacker with physical access read‑only access to system files.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsable: TPLink
• Réserver: 20/01/2026
• Divulgation: 29/01/2026
• Modérer: accepté
• Entrée: VDB-343461
• CPE: prêt
• CWE: CWE-59 (confirmé)
• CVSS: 4.6 (NVD)
• EPSS: 0.00188
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-15543
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-15543
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-15543/