CVE-2025-15551
The response coming from TP-Link Archer MR200 v5.2, C20 v5 and v6, TL-WR850N v3, and TL-WR845N v4 for any request is getting executed by the JavaScript function like eval directly without any check.
Does this matter?
Lower severity and a low EPSS score (0.45%). Track it; it rarely justifies an emergency change on its own.
Description
The response coming from TP-Link Archer MR200 v5.2, C20 v5 and v6, TL-WR850N v3, and TL-WR845N v4 for any request is getting executed by the JavaScript function like eval directly without any check. Attackers can exploit this vulnerability via a Man-in-the-Middle (MitM) attack to execute JavaScript code on the router's admin web portal without the user's permission or knowledge.
- CVSS 4.0
- 5.9 MEDIUMCVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.45% probability · 38th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-95
- Affected
- tp-link/archer mr200 firmware · tp-link/archer c20 firmware · tp-link/tl-wr850n firmware · tp-link/tl-wr845n firmware
- Source
- f23511db-6c3e-4e32-a477-6aa17d310630
References
- https://www.tp-link.com/en/support/download/archer-c20/v5/#Firmware
- https://www.tp-link.com/en/support/download/archer-c20/v6/#FirmwareProduct
- https://www.tp-link.com/en/support/download/archer-mr200/v5.20/#FirmwareProduct
- https://www.tp-link.com/en/support/download/tl-wr845n/#FirmwareProduct
- https://www.tp-link.com/in/support/download/archer-c20/v6/#FirmwareProduct
- https://www.tp-link.com/in/support/download/archer-mr200/v5.20/#FirmwareProduct
- https://www.tp-link.com/in/support/download/tl-wr845n/#FirmwareProduct
- https://www.tp-link.com/in/support/download/tl-wr850n/#FirmwareProduct
- https://www.tp-link.com/us/support/download/archer-c20/v5/#Firmware
- https://www.tp-link.com/us/support/faq/4948/Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.