TP-Link VX800V Firmware vulnerabilities

5 CVEs affecting TP-Link VX800V Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-15548, published 2026-01-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-15542, published 2026-01-29. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. Improper handling of exceptional conditions in VX800v v1.0 in SIP processing allows an attacker to flood the device with crafted INVITE messages, blocking all voice lines and causing a denial of…
CVE-2025-15541, published 2026-01-29. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. Improper link resolution in the VX800v v1.0 SFTP service allows authenticated adjacent attackers to use crafted symbolic links to access system files, resulting in high confidentiality impact and…
CVE-2025-15543, published 2026-01-29. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. Improper link resolution in USB HTTP access path in VX800v v1.0 allows a crafted USB device to expose root filesystem contents, giving an attacker with physical access read‑only access to system…
CVE-2025-13399, published 2026-01-29. High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days. A weakness in the web interface’s application layer encryption in VX800v v1.0 allows an adjacent attacker to brute force the weak AES key and decrypt intercepted traffic. Successful exploitation…
CVE-2025-15548, published 2026-01-29. Medium severity, CVSS 6.5. EPSS: 0.1% chance of exploitation in the next 30 days. Some VX800v v1.0 web interface endpoints transmit sensitive information over unencrypted HTTP due to missing application layer encryption, allowing a network adjacent attacker to intercept this…