Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2025-15543

Read-Only Root Access via USB Storage Device in TP-Link VX800v

Description

Improper link resolution in USB HTTP access path in VX800v v1.0 allows a crafted USB device to expose root filesystem contents, giving an attacker with physical access read‑only access to system files.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TP-Link Systems Inc. VX800v v1.0

Default version status: unaffected

  • 0 to < 800.0.11 (0.11.0 3.0.0 v603c.0 Build 250702)affected

References