CVE-2025-15548 — Missing Application-Layer Encryption in Web Interface Endpoints on TP-Link VX800v

CVE-2025-15548

Missing Application-Layer Encryption in Web Interface Endpoints on TP-Link VX800v PUBLISHED

Description (CNA)

Some VX800v v1.0 web interface endpoints transmit sensitive information over unencrypted HTTP due to missing application layer encryption, allowing a network adjacent attacker to intercept this traffic and compromise its confidentiality.

Affected (CNA)

Vendor / product	Versions
TP-Link Systems Inc. / VX800v v1.0	affected 0 before 800.0.18_0.18.0 3.0.0 v603c.0 Build 260203 Rel.35251n

CWE

CWE-311

References

https://www.tp-link.com/de/support/download/vx800v/#Firmware
https://www.tp-link.com/us/support/faq/4930/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.