CveMateVulnerability intelligence

TP Link Systems Inc. vulnerabilities, page 3

201 vulnerabilities

Known vulnerabilities in TP Link Systems Inc. products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 430 products.

CVE-2025-7851tp-link systems inc.festa gateways+151y ago21-10-2025 00:29

An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways.CVE-2025-7724tp-link systems inc.vigi nvr1104h-4p v1+11y ago22-07-2025 20:43

An unauthenticated OS command injection vulnerability exists in VIGI NVR1104H-4P V1 and VIGI NVR2016H-16MP V2.This issue affects VIGI NVR1104H-4P V1: before 1.1.5 Build 250518; VIGI NVR2016H-16MP V2: before 1.3.1 Build 250407.CVE-2025-7723tp-link systems inc.vigi nvr1104h-4p v1+11y ago22-07-2025 20:42

A command injection vulnerability exists that can be exploited after authentication in VIGI NVR1104H-4P V1 and VIGI NVR2016H-16MP V2.This issue affects VIGI NVR1104H-4P V1: before 1.1.5 Build 250518; VIGI NVR2016H-16MP V2: before 1.3.1 Build 250407.CVE-2025-7850tp-link systems inc.festa gateways+151y ago21-10-2025 00:28

A command injection vulnerability may be exploited after the admin's authentication on the web portal on Omada gateways.CVE-2025-53713tp-link systems inc.tl-wr841n v11+11y ago29-07-2025 17:58

A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm/WlanNetworkRpm_APC.htm file due to missing input parameter validation, which may lead to the buffer overflow to cause a crash of the web service and result in a denial-of-service (DoS) condition. The attack may be launched remotely. This vulnerability only affects products that are no longer supported by the maintainer.CVE-2025-53715tp-link systems inc.tl-wr841n v11+11y ago29-07-2025 17:58

A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm/Wan6to4TunnelCfgRpm.htm file due to missing input parameter validation, which may lead to the buffer overflow to cause a crash of the web service and result in a denial-of-service (DoS) condition. The attack may be launched remotely. This vulnerability only affects products that are no longer supported by the maintainer.CVE-2025-53714tp-link systems inc.tl-wr841n v11+11y ago29-07-2025 17:58

A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm/WzdWlanSiteSurveyRpm_AP.htm file due to missing input parameter validation, which may lead to the buffer overflow to cause a crash of the web service and result in a denial-of-service (DoS) condition. The attack may be launched remotely. This vulnerability only affects products that are no longer supported by the maintainer.CVE-2025-53711tp link systems inc.tl-wr842nd v2+31y ago29-07-2025 17:57

A vulnerability has been found in TP-Link TL-WR841N v11, TL-WR842ND v2 and TL-WR494N v3. The vulnerability exists in the /userRpm/WlanNetworkRpm.htm file due to missing input parameter validation, which may lead to the buffer overflow to cause a crash of the web service and result in a denial-of-service (DoS) condition. The attack may be launched remotely. This vulnerability only affects products that are no longer supported by the maintainer.CVE-2025-53712tp-link systems inc.tl-wr841n v11+11y ago29-07-2025 17:57

A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm/WlanNetworkRpm_AP.htm file due to missing input parameter validation, which may lead to the buffer overflow to cause a crash of the web service and result in a denial-of-service (DoS) condition. The attack may be launched remotely. This vulnerability only affects products that are no longer supported by the maintainer.CVE-2025-58077tp-link systems inc.archer ax53 v1.0+18mo ago03-02-2026 18:46

Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows authenticated adjacent attackers to cause a segmentation fault or potentially execute arbitrary code via a specially crafted set of network packets containing an excessive number of host entries This issue affects Archer AX53 v1.0: through 1.3.1 Build 20241120.CVE-2025-58455tp-link systems inc.archer ax53 v1.0+18mo ago03-02-2026 18:46

Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows authenticated adjacent attackers to cause a segmentation fault or potentially execute arbitrary code via a specially crafted network packet whose length exceeds the maximum expected value.This issue affects Archer AX53 v1.0: through 1.3.1 Build 20241120.CVE-2025-10991tp-link systems inc.tapo d230s1 v1.201y ago30-09-2025 00:08

The attacker may obtain root access by connecting to the UART port and this vulnerability requires the attacker to have the physical access to the device. This issue affects Tapo D230S1 V1.20: before 1.2.2 Build 20250907.CVE-2025-15606tp-link systems inc.td-w8961n v4.0+17mo ago23-03-2026 18:36

A Denial-of-Service (DoS) vulnerability in the httpd component of TP-Link's TD-W8961N v4.0 due to improper input sanitization, allows crafted requests to trigger a processing error that causes the httpd service to crash. Successful exploitation may allow the attacker to cause service interruption, resulting in a DoS condition.CVE-2025-15629tp link systems inc.omada access points+1152mo ago03-08-2026 17:50

A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be predictable due to insufficient entropy in session key generation. An attacker who successfully intercepts adoption-related communications may be able to recover session encryption keys and decrypt affected communications.CVE-2025-15541tp-link systems inc.vx800v v1.0+18mo ago29-01-2026 18:05

Improper link resolution in the VX800v v1.0 SFTP service allows authenticated adjacent attackers to use crafted symbolic links to access system files, resulting in high confidentiality impact and limited integrity risk.CVE-2025-15543tp-link systems inc.vx800v v1.0+18mo ago29-01-2026 18:06

Improper link resolution in USB HTTP access path in VX800v v1.0 allows a crafted USB device to expose root filesystem contents, giving an attacker with physical access read‑only access to system files.CVE-2025-15517tp-link systems inc.archer nx200 v1.0+147mo ago23-03-2026 18:01

A missing authentication check in the HTTP server on TP-Link Archer NX200, NX210, NX500 and NX600 to certain cgi endpoints allows unauthenticated access intended for authenticated users. An attacker may perform privileged HTTP actions without authentication, including firmware upload and configuration operations.CVE-2025-15605tp-link systems inc.archer nx200 v1.0+147mo ago23-03-2026 18:02

A hardcoded cryptographic key within the configuration mechanism on TP-Link Archer NX200, NX210, NX500 and NX600 enables decryption and re-encryption of device configuration data. An authenticated attacker may decrypt configuration files, modify them, and re-encrypt them, affecting the confidentiality and integrity of device configuration data.CVE-2025-15630tp link systems inc.omada access points+1152mo ago03-08-2026 17:51

A race condition exists in the cloud-based Omada device adoption process when an attacker may be able to interact with the adoption workflow before a legitimate device completes registration, resulting in provisioning information being delivered to an attacker. Successful exploitation may allow disclosure of provisioning information intended for a legitimate device.CVE-2025-15568tp-link systems inc.archer axe75 v1.6/v1.0+17mo ago09-03-2026 16:19

A command injection vulnerability was identified in the web module of Archer AXE75 v1.6/v1.0 router. An authenticated attacker with adjacent-network access may be able to perform remote code execution (RCE) when the router is configured with sysmode=ap. Successful exploitation results in root-level privileges and impacts confidentiality, integrity and availability of the device. This issue affects Archer AXE75 v1.6/v1.0: through 1.3.2 Build 20250107.