CVE-2025-15608
criticalpriority · track · 39EPSS 0.007 · 52 %ileEUUSEPSS · scored 2026-10-28
This vulnerability in AX53 v1, AX55 v4 and AX55 v4.6 results from insufficient input sanitization in the device’s probe handling logic, where unvalidated parameters can trigger a stack-based buffer overflow that causes the affected service to crash and, under specific conditions, may enable remote code execution through complex heap-spray techniques. Successful exploitation may result in repeated service unavailability and, in certain scenarios, allow an attacker to gain control of the device.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–critical · 5.2–9.8
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (4)
Products and version ranges known to be affected.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (12)
External citations — patches, advisories, analysis.
- https://www.tp-link.com/en/support/download/archer-ax53/v1/#Firmwarecnnvd
- https://www.tp-link.com/us/support/faq/5025/cnnvd
- https://www.tp-link.com/en/support/download/archer-ax53/v1/#Firmwareenisa_euvd
- https://www.tp-link.com/en/support/download/archer-ax55/v4/enisa_euvd
- https://www.tp-link.com/us/support/download/archer-ax55/v4.60/#Firmwareenisa_euvd
- https://www.tp-link.com/us/support/download/archer-ax55/v4/#Firmwareenisa_euvd
- https://www.tp-link.com/us/support/faq/5025/enisa_euvd
- https://www.tp-link.com/en/support/download/archer-ax53/v1/#FirmwareProductnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan