Tp-link Vx800v Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Tp-link Vx800v Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2025-13399 — CVSS 8.8 (high): A weakness in the web interface’s application layer encryption in VX800v v1.0 allows an adjacent attacker to brute force the weak AES key…
• CVE-2025-15548 — CVSS 6.5 (medium): Some VX800v v1.0 web interface endpoints transmit sensitive information over unencrypted HTTP due to missing application layer encryption…
• CVE-2025-15541 — CVSS 6.3 (medium): Improper link resolution in the VX800v v1.0 SFTP service allows authenticated adjacent attackers to use crafted symbolic links to access…
• CVE-2025-15542 — CVSS 5.3 (medium): Improper handling of exceptional conditions in VX800v v1.0 in SIP processing allows an attacker to flood the device with crafted INVITE…
• CVE-2025-15543 — CVSS 4.6 (medium): Improper link resolution in USB HTTP access path in VX800v v1.0 allows a crafted USB device to expose root filesystem contents, giving an…