CVE-2025-15543

CVE-2025-15543 describes an improper link resolution vulnerability (CWE-59) in the VX800v v1.0, specifically within its USB HTTP access path. This flaw allows a physically present attacker, using a specially crafted USB device, to gain read-only access to the device's root filesystem contents. The vulnerability has a CVSSv4 score of 5.1 (MEDIUM), indicating a low attack complexity and no user interaction required, but it necessitates physical access to the device (Attack Vector: Physical). The primary impact is high confidentiality, as system files can be exposed, though integrity and availability are not directly affected. Currently, there is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE. Its EPSS score is very low, suggesting a minimal likelihood of exploitation in the wild.