Approved changes feed: RSS · Atom

cpe:2.3:o:tp-link:archer_nx210_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorTp Link (0b2e1553-ac8b-5981-a60b-ca6c27ee3a6e)
ProductArcher Nx210 Firmware (0cc010dd-e866-53b4-9224-2b5cf1836644)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-15605 vulnerable 2026-06-08 07:06:36.532598 Hardcoded Cryptographic Key in Configuration Encryption Mechanism on TP-Link Archer NX200, NX210, NX500 and NX600
A hardcoded cryptographic key within the configuration mechanism on TP-Link Archer NX200, NX210, NX500 and NX600 enables decryption and re-encryption of device configuration data. An authenticated attacker may decrypt configuration files, modify them, and re-encrypt them, affecting the confidentiality and integrity of device configuration data.
Published: 2026-03-23T18:02:01.109Z
Updated: 2026-03-24T03:56:03.860Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15519 vulnerable 2026-06-08 07:06:36.375671 Command Injection in Modem Management CLI on TP-Link Archer NX200, NX210, NX500 and NX600
Improper input handling in a modem-management administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may execute arbitrary commands on the operating system, impacting the confidentiality, integrity, and availability of the device.
Published: 2026-03-23T18:01:50.036Z
Updated: 2026-03-24T03:56:00.901Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15518 vulnerable 2026-06-08 07:06:36.373144 Command Injection in Wireless Control CLI on TP-Link Archer NX200, NX210, NX500 and NX600
Improper input handling in a wireless-control administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of an operating system command. An authenticated attacker with administrative privileges may execute arbitrary commands on the operating system, impacting the confidentiality, integrity, and availability of the device.
Published: 2026-03-23T18:01:39.070Z
Updated: 2026-03-24T03:55:59.756Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15517 vulnerable 2026-06-08 07:06:36.360744 Authorization Bypass in HTTP Server Endpoints on TP-Link Archer NX200, NX210, NX500 and NX600
A missing authentication check in the HTTP server on TP-Link Archer NX200, NX210, NX500 and NX600 to certain cgi endpoints allows unauthenticated access intended for authenticated users. An attacker may perform privileged HTTP actions without authentication, including firmware upload and configuration operations.
Published: 2026-03-23T18:01:31.162Z
Updated: 2026-03-24T03:56:05.005Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.