Login Request a demo
High severity · published Mar 23, 2026
CVE-2025-15518
Command Injection in Wireless Control CLI on TP-Link Archer NX200, NX210, NX500 and NX600
7.2
CVSS
0.6%
EPSS
No
On KEV
Description
Improper input handling in a wireless-control administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may execute arbitrary commands on the operating system, impacting the confidentiality, integrity, and availability of the device.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 51% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
Archer NX200 v1.0 · TP-Link Systems Inc.
before 1.8.0 Build 260311 · source: vendor
AN
Archer NX200 v2.0 · TP-Link Systems Inc.
before 1.3.0 Build 260311 · source: vendor
AN
Archer NX200 v2.20 · TP-Link Systems Inc.
before 1.3.0 Build 260311 · source: vendor
AN
Archer NX200 v3.0 · TP-Link Systems Inc.
before < 1.3.0 Build 260309 · source: vendor
AN
Archer NX210 v2.0 v2.20 · TP-Link Systems Inc.
before 1.3.0 Build 260311 · source: vendor
AN
Archer NX210 v3.0 · TP-Link Systems Inc.
before 1.3.0 Build 260309 · source: vendor
AN
Archer NX500 v1.0 · TP-Link Systems Inc.
before 1.3.0 Build 260311 · source: vendor
AN
Archer NX500 v2.0 · TP-Link Systems Inc.
before < 1.5.0 Build 260309 · source: vendor
AN
Archer NX600 v1.0 · TP-Link Systems Inc.
before 1.4.0 Build 260311 · source: vendor
AN
Archer NX600 v2.0 · TP-Link Systems Inc.
before 1.3.0 Build 260311 · source: vendor
AN
Archer NX600 v3.0 · TP-Link Systems Inc.
before 1.3.0 Build 260309 · source: vendor
AN
Archer Nx200 Firmware · Tp-link
before 1.3.0; before 1.3.0; before 1.8.0 · source: NVD
Affected product
AN
Archer NX200 v1.0
TP-Link Systems Inc.
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-15518
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-15518
Product
https://www.tp-link.com/en/support/download/archer-nx200/#Firmware
Product
https://www.tp-link.com/en/support/download/archer-nx210/#Firmware
Product
https://www.tp-link.com/en/support/download/archer-nx500/#Firmware
Product
https://www.tp-link.com/en/support/download/archer-nx600/#Firmware
Vendor Advisory
https://www.tp-link.com/us/support/faq/5027/
More from Archer NX200 v1.0
8.1
CVE-2025-15517
Authorization Bypass in HTTP Server Endpoints on TP-Link Archer NX200, NX210, NX500 and NX600
7.3
CVE-2025-15605
Hardcoded Cryptographic Key in Configuration Encryption Mechanism on TP-Link Archer NX200, NX210, NX500 and NX600
7.2
CVE-2025-15519
Command Injection in Modem Management CLI on TP-Link Archer NX200, NX210, NX500 and NX600