Home

Description

Improper link resolution in USB HTTP access path in VX800v v1.0 allows a crafted USB device to expose root filesystem contents, giving an attacker with physical access read‑only access to system files.

PUBLISHED Reserved 2026-01-20 | Published 2026-01-29 | Updated 2026-01-29 | Assigner TPLink




MEDIUM: 5.1CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Problem types

CWE-59 Improper Link Resolution Before File Access ('Link Following')

Product status

Default status
unaffected

Any version before 800.0.11 (0.11.0 3.0.0 v603c.0 Build 250702)
affected

References

www.tp-link.com/de/support/download/vx800v/ patch

www.tp-link.com/us/support/faq/4930/ vendor-advisory

cve.org (CVE-2025-15543)

nvd.nist.gov (CVE-2025-15543)

Download JSON