CVE-2025-15543

MEDIUM

TP-Link VX800v Firmware < 800.0.11 - Improper Link Resolution in USB HTTP Access Path

Title source: llm

Description

Improper link resolution in USB HTTP access path in VX800v v1.0 allows a crafted USB device to expose root filesystem contents, giving an attacker with physical access read‑only access to system files.

References (2)

Core 2

Core References

Various Sources patch

https://www.tp-link.com/de/support/download/vx800v/#Firmware

Various Sources vendor-advisory

https://www.tp-link.com/us/support/faq/4930/

Scores

CVSS v3 4.6

EPSS 0.0019

EPSS Percentile 8.5%

Attack Vector PHYSICAL

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-59

Status published

Products (1)

tp-link/vx800v_firmware < 800.0.11

Published Jan 29, 2026

Tracked Since Feb 18, 2026