CVE-2025-15542

Published: Jan 29, 2026

Modified: Jan 29, 2026

PUBLISHED

Description

Improper handling of exceptional conditions in VX800v v1.0 in SIP processing allows an attacker to flood the device with crafted INVITE messages, blocking all voice lines and causing a denial of service on incoming calls.

Vendor	Product	Versions
TP-Link Systems Inc.	VX800v v1.0	affected `0 - < 800.0.12 (0.12.0 3.0.0 v603c.0 Build 250912)`

Weaknesses (CWE)

CWE-754

References

https://www.tp-link.com/de/support/download/vx800v/#Firmware

patch

https://www.tp-link.com/us/support/faq/4930/

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2025-15542

Description

Affected Products

Weaknesses (CWE)

References