Lucene search
+L

CVE-2025-15518 Command Injection in Wireless Control CLI on TP-Link Archer NX200, NX210, NX500 and NX600

🗓️ 23 Mar 2026 18:01:39Reported by TPLinkType 
cvelist
 cvelist
🔗 www.cve.org👁 45 Views

Improper input handling in TP-Link Archer wireless control CLI lets authenticated administrators execute arbitrary OS commands.

Related
Affected
Refs
[
  {
    "vendor": "TP-Link Systems Inc.",
    "product": "Archer NX600 v3.0",
    "platforms": [
      "Linux"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.3.0 Build 260309",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "TP-Link Systems Inc.",
    "product": "Archer NX600 v2.0",
    "platforms": [
      "Linux"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.3.0 Build 260311",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "TP-Link Systems Inc.",
    "product": "Archer NX600 v1.0",
    "platforms": [
      "Linux"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.4.0 Build 260311",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "TP-Link Systems Inc.",
    "product": "Archer NX500 v2.0",
    "platforms": [
      "Linux"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "< 1.5.0 Build 260309",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "TP-Link Systems Inc.",
    "product": "Archer NX500 v1.0",
    "platforms": [
      "Linux"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.3.0 Build 260311",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "TP-Link Systems Inc.",
    "product": "Archer NX210 v3.0",
    "platforms": [
      "Linux"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.3.0 Build 260309",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "TP-Link Systems Inc.",
    "product": "Archer NX210 v2.0 v2.20",
    "platforms": [
      "Linux"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.3.0 Build 260311",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "TP-Link Systems Inc.",
    "product": "Archer NX200 v3.0",
    "platforms": [
      "Linux"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "< 1.3.0 Build 260309",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "TP-Link Systems Inc.",
    "product": "Archer NX200 v2.20",
    "platforms": [
      "Linux"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.3.0 Build 260311",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "TP-Link Systems Inc.",
    "product": "Archer NX200 v2.0",
    "platforms": [
      "Linux"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.3.0 Build 260311",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "TP-Link Systems Inc.",
    "product": "Archer NX200 v1.0",
    "platforms": [
      "Linux"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.8.0 Build 260311",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation