Vx800v Firmware (Tp-link) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2026-01-29. Vendor: Tp-link.

CVEs of Vx800v Firmware

• CVE-2025-15543 - CVSS 5.1 (medium), 2026-01-29: Improper link resolution in USB HTTP access path in VX800v v1.0 allows a crafted USB device to expose root filesystem contents, giving an attacker with…
• CVE-2025-15542 - CVSS 6.3 (medium), 2026-01-29: Improper handling of exceptional conditions in VX800v v1.0 in SIP processing allows an attacker to flood the device with crafted INVITE messages, blocking all…
• CVE-2025-15541 - CVSS 6.9 (medium), 2026-01-29: Improper link resolution in the VX800v v1.0 SFTP service allows authenticated adjacent attackers to use crafted symbolic links to access system files,…
• CVE-2025-15548 - CVSS 6.5 (medium), 2026-01-29: Some VX800v v1.0 web interface endpoints transmit sensitive information over unencrypted HTTP due to missing application layer encryption, allowing a network…
• CVE-2025-13399 - CVSS 8.8 (high), 2026-01-29: A weakness in the web interface’s application layer encryption in VX800v v1.0 allows an adjacent attacker to brute force the weak AES key and decrypt…