CVE-2025-15607: tp-link systems inc. ax53 v1 Command Injection

Vulnerability summary

CVE-2025-15607 is a critical (CVSS 9.8) Command Injection vulnerability in tp-link systems inc. ax53 v1. EPSS estimates a 2.05% chance of exploitation in the next 30 days, higher than 81% of scored vulnerabilities.

Timeline

1. 20-03-2026
   PublishedVulnerability first disclosed.
2. 23-03-2026
   Last modifiedVulnerability information updated.

Description

A command injection vulnerability on AX53 v1 occurs in mscd debug functionality due to insufficient input handling, allowing log redirection to arbitrary files and concatenation of unvalidated file content into shell commands, enabling authenticated attackers to inject and execute arbitrary commands. Successful exploitation may allow execution of malicious commands and ultimately full control of the device.

• CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.