Skip to content
OpenAdvisories
Medium · 6.3 CVE-2025-15542 EUVD-2025-206533GHSA-mcfx-6pwv-q5v8

Denial of Service (DoS) of VoIP Communication on TP-Link VX800v

Published Jan 29, 2026 · Updated Jan 29, 2026 · Assigned by TPLink

Description

Improper handling of exceptional conditions in VX800v v1.0 in SIP processing allows an attacker to flood the device with crafted INVITE messages, blocking all voice lines and causing a denial of service on incoming calls.

Affected products

VendorProductAffectedFixed
TP-Link Systems VX800v v1.0 < 800.0.12 (0.12.0 3.0.0 v603c.0 Build 250912) 800.0.12 (0.12.0 3.0.0 v603c.0 Build 250912)

References