CVE-2025-15542

6.3 mediumEPSS 0.3%

Medium (6.3) in tp-link vx800v firmware. EPSS 0.3% chance of exploitation in the next 30 days.

Improper handling of exceptional conditions in VX800v v1.0 in SIP processing allows an attacker to flood the device with crafted INVITE messages, blocking all voice lines and causing a denial of service on incoming calls.

Severity

CVSS 4.0

6.3 medium

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 21% of CVEs (scores of 2026-10-31)
CWE: CWE-754
Published: 2026-01-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

tp-link:vx800v_firmware

References

https://www.tp-link.com/de/support/download/vx800v/#Firmware
https://www.tp-link.com/us/support/faq/4930/

Check your stack JSON