CVE-2025-15568 is a high-severity command injection vulnerability found in the web module of TP-Link Archer AXE75 v1.6/v1.0 routers, affecting firmware versions through 1.3.2 Build 20250107 when configured in AP mode. An authenticated attacker with adjacent-network access can exploit this flaw to achieve remote code execution with root-level privileges, severely impacting the device's confidentiality, integrity, and availability, as indicated by its CVSS score of 8.5 (HIGH). Currently, there is no evidence of active exploitation, public exploit code availability (e.g., Metasploit, ExploitDB), or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 1.3.2CPE matchmatch criteria | cpe:2.3:o:tp-link:archer_axe75_firmware:*:*:*:*:*:*:*:* | ||
1.3.2CPE matchmatch criteria | cpe:2.3:o:tp-link:archer_axe75_firmware:1.3.2:-:*:*:*:*:*:* | ||
1.3.2CPE matchmatch criteria | cpe:2.3:o:tp-link:archer_axe75_firmware:1.3.2:build_20250107:*:*:*:*:*:* |
CVSS version used by this source: 4.0
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.