Export limit exceeded: 425824 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2025-15517

Authorization Bypass in HTTP Server Endpoints on TP-Link Archer NX200, NX210, NX500 and NX600

A missing authentication check in the HTTP server on TP-Link Archer NX200, NX210, NX500 and NX600 to certain cgi endpoints allows unauthenticated access intended for authenticated users. An attacker may perform privileged HTTP actions without authentication, including firmware upload and configuration operations.

CVSS 4.0 · 8.6 High EPSS 2.9% KEV · Not listed
Vendors
Tp-link
Products
Archer Nx200 Archer Nx200 Firmware Archer Nx200 V1.0 and 16 more
CVE-2025-15518

Command Injection in Wireless Control CLI on TP-Link Archer NX200, NX210, NX500 and NX600

Improper input handling in a wireless-control administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may execute arbitrary commands on the operating system, impacting the confidentiality, integrity, and availability of the device.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Tp-link
Products
Archer Nx200 Archer Nx200 Firmware Archer Nx200 V1.0 and 16 more
CVE-2025-15519

Command Injection in Modem Management CLI on TP-Link Archer NX200, NX210, NX500 and NX600

Improper input handling in a modem-management administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may execute arbitrary commands on the operating system, impacting the confidentiality, integrity, and availability of the device.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Tp-link
Products
Archer Nx200 Archer Nx200 Firmware Archer Nx200 V1.0 and 16 more
CVE-2025-15605

Hardcoded Cryptographic Key in Configuration Encryption Mechanism on TP-Link Archer NX200, NX210, NX500 and NX600

A hardcoded cryptographic key within the configuration mechanism on TP-Link Archer NX200, NX210, NX500 and NX600 enables decryption and re-encryption of device configuration data. An authenticated attacker may decrypt configuration files, modify them, and re-encrypt them, affecting the confidentiality and integrity of device configuration data.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Tp-link
Products
Archer Nx200 Archer Nx200 Firmware Archer Nx200 V1.0 and 16 more