by Kastro
Paper/Archive/CVE-2025-15607

CVE-2025-15607

TP-Link Systems Inc. AX53 v1 — Authenticated Command Injection in mcsd Service of TP-Link Archer AX53

EPSS 2%CVSS 9.8
critical.is priorityof 100
46
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 81.2.812 × 2016.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A command injection vulnerability on AX53 v1 occurs in mscd debug functionality due to insufficient input handling, allowing log redirection to arbitrary files and concatenation of unvalidated file content into shell commands, enabling authenticated attackers to inject and execute arbitrary commands. Successful exploitation may allow execution of malicious commands and ultimately full control of the device.

Affected

ProductAffectedFixed inSource
AX53 v1< 251029251029CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
TPLink (CNA)7.3CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

patchtp-link.com/en/support/download/archer-ax53/v1/#Firmwareadvisorytp-link.com/us/support/faq/5025