Auth bypass in TP-Link Archer Nx200
CVE-2025-15517
A missing authentication check in the HTTP server on TP-Link Archer NX200, NX210, NX500 and NX600 to certain cgi endpoints allows unauthenticated access intended for authenticated users. An attacker may perform privileged HTTP actions without authentication, including firmware upload and configuration operations.
Vulnerability class: Broken Authentication
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N.
EPSS exploit prediction
EPSS: 0.030 (86.7th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 87th percentile — 86.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.030 · newest: 0.030 · change: 0.000
Affected products
- TP-Link Archer Nx200 — versions 3.0, 2.0, 2.20
- TP-Link Archer Nx200 Firmware
- TP-Link Archer Nx210 — versions 3.0, 2.0, 2.20
- TP-Link Archer Nx210 Firmware
- TP-Link Archer Nx500 — versions 2.0, 1.0
- TP-Link Archer Nx500 Firmware
- TP-Link Archer Nx600 — versions 3.0, 2.0, 1.0
- TP-Link Archer Nx600 Firmware
- TP-Link Systems Inc. Archer Nx200 V1.0 — versions 0
- TP-Link Systems Inc. Archer Nx200 V2.0 — versions 0
Weakness classification (CWE)
References
- f23511db-6c3e-4e32-a477-6aa17d310630 (Product, patch)
- f23511db-6c3e-4e32-a477-6aa17d310630 (Product, patch)
- f23511db-6c3e-4e32-a477-6aa17d310630 (Product, patch)
- f23511db-6c3e-4e32-a477-6aa17d310630 (Product, patch)
- f23511db-6c3e-4e32-a477-6aa17d310630 (vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2025-15517?
- CVE-2025-15517 is a high-severity vulnerability in TP-Link Archer Nx200, classified under Missing Authentication for Critical Function. CVSS score: 8.1/10. Published 2026-03-23.
- How severe is CVE-2025-15517?
- High severity. CVSS v3 base score is 8.1 out of 10.