Tp-link Archer Nx600 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Tp-link Archer Nx600 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2025-15517 — CVSS 8.1 (high): A missing authentication check in the HTTP server on TP-Link Archer NX200, NX210, NX500 and NX600 to certain cgi endpoints allows…
• CVE-2025-15605 — CVSS 7.3 (high): A hardcoded cryptographic key within the configuration mechanism on TP-Link Archer NX200, NX210, NX500 and NX600 enables decryption and…
• CVE-2025-15518 — CVSS 7.2 (high): Improper input handling in a wireless-control administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted…
• CVE-2025-15519 — CVSS 7.2 (high): Improper input handling in a modem-management administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted…