RCE in Tp-Link Archer Nx200
CVE-2025-15519
Improper input handling in a modem-management administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may execute arbitrary commands on the operating system, impacting the confidentiality, integrity, and availability of the device.
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.006 (46.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Tp-link Archer_nx200 — versions 3.0, 2.0, 2.20
- Tp-link Archer_nx200_firmware
- Tp-link Archer_nx210 — versions 3.0, 2.0, 2.20
- Tp-link Archer_nx210_firmware
- Tp-link Archer_nx500 — versions 2.0, 1.0
- Tp-link Archer_nx500_firmware
- Tp-link Archer_nx600 — versions 3.0, 2.0, 1.0
- Tp-link Archer_nx600_firmware
- Tp-link Systems Inc. Archer Nx200 V1.0 — versions 0
- Tp-link Systems Inc. Archer Nx200 V2.0 — versions 0
Weakness classification (CWE)
References
- f23511db-6c3e-4e32-a477-6aa17d310630 (Product, patch)
- f23511db-6c3e-4e32-a477-6aa17d310630 (Product, patch)
- f23511db-6c3e-4e32-a477-6aa17d310630 (Product, patch)
- f23511db-6c3e-4e32-a477-6aa17d310630 (Product, patch)
- f23511db-6c3e-4e32-a477-6aa17d310630 (vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2025-15519?
- CVE-2025-15519 is a high-severity vulnerability in Tp-Link Archer Nx200, classified under OS Command Injection. CVSS score: 7.2/10. Published 2026-03-23.
- How severe is CVE-2025-15519?
- High severity. CVSS v3 base score is 7.2 out of 10.