AI description
CVE-2025-15517 describes an authorization bypass vulnerability found in the HTTP server of several TP-Link Archer NX series routers, specifically models NX200, NX210, NX500, and NX600. This flaw allows unauthenticated attackers to access certain CGI endpoints that are intended for authenticated users. By exploiting this missing authentication check, an attacker can perform privileged actions on the affected devices without needing to authenticate. These actions include, but are not limited to, uploading new firmware or modifying device configurations.
- Description
- A missing authentication check in the HTTP server on TP-Link Archer NX200, NX210, NX500 and NX600 to certain cgi endpoints allows unauthenticated access intended for authenticated users. An attacker may perform privileged HTTP actions without authentication, including firmware upload and configuration operations.
- Source
- f23511db-6c3e-4e32-a477-6aa17d310630
- NVD status
- Analyzed
- Products
- archer_nx600_firmware, archer_nx500_firmware, archer_nx210_firmware, archer_nx200_firmware
CVSS 4.0
- Type
- Secondary
- Base score
- 8.6
- Impact score
- -
- Exploitability score
- -
- Vector string
- CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Severity
- HIGH
CVSS 3.1
- Type
- Primary
- Base score
- 8.1
- Impact score
- 5.2
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- Severity
- HIGH
- f23511db-6c3e-4e32-a477-6aa17d310630
- CWE-306
- Hype score
- Not currently trending
⚠️ Vulnerabilidades en productos TP-Link ❗ CVE-2025-15605 ❗ CVE-2025-15517 ➡️ Más info: https://t.co/OaDCjfK46V https://t.co/rD5vC8mJ26
@CERTpy
6 Apr 2026
200 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-15517: TP-Link Archer routers allow unauthenticated firmware takeover. Your home network is your wealth perimeter. Sovereign Protocol: Replace foreign consumer routers immediately. Deploy enterprise-grade hardware. Segment networks. Verify firmware. #TheSovereignProtocol
@sovereignexec
28 Mar 2026
66 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
TRC analysis shows attackers exploiting TP-Link router authentication bypass (CVE-2025-15517) to upload malicious firmware and bridge network boundaries. The compromised devices enable lateral movement across network segments, effectively bypassing perimeter controls.
@aviatrixtrc
27 Mar 2026
129 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
TP-Link warns users to patch critical router auth bypass flaw (CVE-2025-15517) via @BleepinComputer #Proficio #ThreatNews #Cybersecurity #MSSP #MDR https://t.co/2Bzl6QHk7o
@proficioinc
27 Mar 2026
158 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
TP-Linkが無線LANルータArcher NXシリーズの乗っ取りが可能な脆弱性を修正。CVE-2025-15517は管理画面の一部CGIエンドポイントにおける認証の欠如。ハードコードされた暗号鍵CVE-2025-15605、adminからのコマンドインジェ
@__kokumoto
26 Mar 2026
904 Impressions
2 Retweets
6 Likes
0 Bookmarks
0 Replies
0 Quotes
https://t.co/cL9b1jNdIk TP-LinkのArcher NXルーターに認証バイパスなど重大な脆弱性（CVE-2025-15517等）が見つかりました。悪用されると端末を乗っ取られる恐れがありますよ。該当機種の方は至急ファームウェアの更新
@Anti_Ch_PCgc
26 Mar 2026
145 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
TP-Link、認証バイパスの重大な脆弱性にパッチ（CVE-2025-15517他） | Codebook｜Security News https://t.co/YMadgpKm5T
@ohhara_shiojiri
26 Mar 2026
139 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
🩹TP-Link、認証バイパスの重大な脆弱性にパッチ（CVE-2025-15517他） 🇬🇷有罪判決受けたスパイウェアメーカーIntellexaの創設者、複数の電話盗聴にギリシャ政府が関与していたと示唆 〜サイバーアラート3月26
@MachinaRecord
26 Mar 2026
260 Impressions
0 Retweets
1 Like
1 Bookmark
0 Replies
0 Quotes
Falha de segurança em roteadores TP-Link: CVE-2025-15517 permite invasão sem senha https://t.co/W0zjU4dCJR
@SempreUpdate
25 Mar 2026
146 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
TP-Link patches CVE-2025-15517 (CVSS 8.6) in Archer NX routers - unauthenticated attackers can upload arbitrary firmware via missing auth check on HTTP endpoints. If you run NX200/210/500/600, patch immediately. https://t.co/Ge3UPCEnxU #infosec #IoT #vulnerability
@CyberDaily_News
25 Mar 2026
133 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
TP-Link patched critical auth-bypass flaw (CVE-2025-15517) in Archer NX routers allowing unauthenticated firmware upload and full device takeover; additional hardcoded key and command injection bugs also fixed. Patch immediately. #CyberSecurity #Vulnerability #Routers #TPLink
@VivekIntel
25 Mar 2026
130 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
TP-Link released firmware updates for Archer NX200, NX210, NX500, and NX600 routers to fix critical authentication bypass (CVE-2025-15517), remove hardcoded cryptographic keys, and patch command injection flaws. #TPLink #RouterFlaws #China https://t.co/2ONtJqzcqx
@TweetThreatNews
25 Mar 2026
180 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[Security Affairs] Patch now: TP-Link Archer NX routers vulnerable to firmware takeover. TP-Link patched a high severity flaw (CVE-2025-15517) in Archer NX routers that could let attackers bypass authentication and install malicious firmware. TP-Link... https://t.co/RD56ahlR40
@shah_sheikh
25 Mar 2026
122 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 TP-LINK ALERTA PARA FALHA CRÍTICA EM ROTEADORES ARCHER NX Vulnerabilidade CVE-2025-15517 permite bypass de autenticação e upload de firmware. Atacantes podem assumir controle total do dispositivo sem credenciais. Histórico da TP-Link inclui exploração por botnets co
@EloViral
25 Mar 2026
107 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
BREAKING: TP-Link patches critical CVE-2025-15517 in Archer NX200, NX210, NX500, NX600 routers that allowed unauthenticated firmware uploads. https://t.co/yuoWUESeLq
@threatcluster
25 Mar 2026
126 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:tp-link:archer_nx600_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "77429691-1193-4480-A64E-E1FB19D6A073",
"versionEndExcluding": "1.3.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:tp-link:archer_nx600:3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "58132EDD-47B7-4E46-B280-FE58A920AE43",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:tp-link:archer_nx500_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "70EF52E9-1D92-4778-99C5-3B76B81681FA",
"versionEndExcluding": "1.5.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:tp-link:archer_nx500:2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "40D78DBB-CAEA-4C2E-B703-2898B73A0A5E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:tp-link:archer_nx210_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "22EA51B1-332E-48BB-BDBA-09A99ECB942F",
"versionEndExcluding": "1.3.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:tp-link:archer_nx210:3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "DA336E76-7910-4780-BCA0-1DA2AA7F9418",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:tp-link:archer_nx200_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "48125D02-70B1-4448-BB33-4759FF0E3936",
"versionEndExcluding": "1.3.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:tp-link:archer_nx200:3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "BD6E8279-6E92-47B5-9EEB-CD83355EF693",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:tp-link:archer_nx600_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "77429691-1193-4480-A64E-E1FB19D6A073",
"versionEndExcluding": "1.3.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:tp-link:archer_nx600:2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "D75A95F3-D299-4037-A755-A6818169762F",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:tp-link:archer_nx600_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "34DC2394-8F53-4C1C-A2AC-E23CE5CB6D2F",
"versionEndExcluding": "1.4.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:tp-link:archer_nx600:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0D20EAF3-A85A-42B1-AF19-D72292523593",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:tp-link:archer_nx500_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "1EC93BA6-FB10-4993-838A-C82FA984B6BB",
"versionEndExcluding": "1.3.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:tp-link:archer_nx500:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "581891F1-F50F-49B0-AB3D-B56ECF43F78B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:tp-link:archer_nx210_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "22EA51B1-332E-48BB-BDBA-09A99ECB942F",
"versionEndExcluding": "1.3.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:tp-link:archer_nx210:2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0C230FE9-FBA9-4DAB-B7C1-2A270F57915C",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:tp-link:archer_nx210:2.20:*:*:*:*:*:*:*",
"matchCriteriaId": "FA0FC692-C2F1-4C0C-9502-84852BDCD7E3",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:tp-link:archer_nx200_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "48125D02-70B1-4448-BB33-4759FF0E3936",
"versionEndExcluding": "1.3.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:tp-link:archer_nx200:2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "A953B18E-F832-4EE9-8821-4F60DC031715",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:tp-link:archer_nx200:2.20:*:*:*:*:*:*:*",
"matchCriteriaId": "10E43B48-2BA2-45ED-9C43-AAD2B021B3D4",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:tp-link:archer_nx200_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "98759C1B-F1B7-4EAC-BC4B-998ACB4B0C0B",
"versionEndExcluding": "1.8.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:tp-link:archer_nx200:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "4D2C0169-5369-42A5-B4E3-E7DBED807789",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
]