Auth bypass in Tp-Link Archer Nx200
CVE-2025-15517
A missing authentication check in the HTTP server on TP-Link Archer NX200, NX210, NX500 and NX600 to certain cgi endpoints allows unauthenticated access intended for authenticated users. An attacker may perform privileged HTTP actions without authentication, including firmware upload and configuration operations.
Vulnerability class: Broken Authentication
EPSS: 0.031 (86.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N.
Affected products
- Tp-link Archer_nx200 — versions 3.0, 2.0, 2.20
- Tp-link Archer_nx200_firmware
- Tp-link Archer_nx210 — versions 3.0, 2.0, 2.20
- Tp-link Archer_nx210_firmware
- Tp-link Archer_nx500 — versions 2.0, 1.0
- Tp-link Archer_nx500_firmware
- Tp-link Archer_nx600 — versions 3.0, 2.0, 1.0
- Tp-link Archer_nx600_firmware
- Tp-link Systems Inc. Archer Nx200 V1.0 — versions 0
- Tp-link Systems Inc. Archer Nx200 V2.0 — versions 0
Weakness classification (CWE)
References
- f23511db-6c3e-4e32-a477-6aa17d310630 (Product, patch)
- f23511db-6c3e-4e32-a477-6aa17d310630 (Product, patch)
- f23511db-6c3e-4e32-a477-6aa17d310630 (Product, patch)
- f23511db-6c3e-4e32-a477-6aa17d310630 (Product, patch)
- f23511db-6c3e-4e32-a477-6aa17d310630 (vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2025-15517?
- CVE-2025-15517 is a high-severity vulnerability in Tp-Link Archer Nx200, classified under Missing Authentication for Critical Function. CVSS score: 8.1/10. Published 2026-03-23.
- How severe is CVE-2025-15517?
- High severity. CVSS v3 base score is 8.1 out of 10.