Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-15548

Missing Application-Layer Encryption in Web Interface Endpoints on TP-Link VX800v

Description

Some VX800v v1.0 web interface endpoints transmit sensitive information over unencrypted HTTP due to missing application layer encryption, allowing a network adjacent attacker to intercept this traffic and compromise its confidentiality.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TP-Link Systems Inc. VX800v v1.0

Default version status: unaffected

  • 0 to < 800.0.18_0.18.0 3.0.0 v603c.0 Build 260203 Rel.35251naffected

References