Threats Tagged 'cve-2025-15517'
View all threats tagged with 'cve-2025-15517'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-15517'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2025-15517 is a high-severity vulnerability affecting TP-Link Archer NX600 v3.0 and related models, caused by missing authentication checks on certain HTTP CGI endpoints. This flaw allows unauthenticated attackers to perform privileged actions such as firmware uploads and configuration changes without requiring any credentials or user interaction. The vulnerability impacts multiple models including NX200, NX210, NX500, and NX600, exposing critical router management functions to remote exploitation. The CVSS 4.0 score of 8.6 reflects the high impact on confidentiality and integrity with no authentication or user interaction needed, though the attack vector is adjacent network. No known exploits are currently reported in the wild. Organizations using these TP-Link devices risk unauthorized control over network infrastructure, potentially leading to persistent compromise, network disruption, or interception of sensitive data. Mitigation requires immediate firmware updates from the vendor once available, network segmentation to limit access to router management interfaces, and monitoring for suspicious HTTP requests targeting vulnerable endpoints. Join the discussion | CVE Database V5 | 03/23/2026, 18:01:31 UTC Added: 03/23/2026, 18:15:55 UTC |
Showing 1 to 1 of 1 result