Skip to content
OpenAdvisories
Medium · 5.1 CVE-2025-15543 EUVD-2025-206534GHSA-45cj-cpr6-w4fh

Read-Only Root Access via USB Storage Device in TP-Link VX800v

Published Jan 29, 2026 · Updated Jan 29, 2026 · Assigned by TPLink

Description

Improper link resolution in USB HTTP access path in VX800v v1.0 allows a crafted USB device to expose root filesystem contents, giving an attacker with physical access read‑only access to system files.

Affected products

VendorProductAffectedFixed
TP-Link Systems VX800v v1.0 < 800.0.11 (0.11.0 3.0.0 v603c.0 Build 250702) 800.0.11 (0.11.0 3.0.0 v603c.0 Build 250702)

References