CVE-2025-15542: TP-Link VX800V Firmware

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper handling of exceptional conditions in VX800v v1.0 in SIP processing allows an attacker to flood the device with crafted INVITE messages, blocking all voice lines and causing a denial of service on incoming calls.

Affected products

• TP-Link VX800V Firmware: before 800.0.12 (fixed in 800.0.12)

Published 2026-01-29. Last modified 2026-06-17.