Vulnerability · Published Jan 29, 2026 · Assigned by TPLink
CVE-2025-15542Denial of Service (DoS) of VoIP Communication on TP-Link VX800v
Medium 6.3
In plain English
A medium-severity security flaw in VX800v v1.0 from TP-Link Systems Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities).
Severity (CVSS 4.0)6.3Medium
Exploit odds (30 days)0.3%top 78.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Improper handling of exceptional conditions in VX800v v1.0 in SIP processing allows an attacker to flood the device with crafted INVITE messages, blocking all voice lines and causing a denial of service on incoming calls.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| TP-Link Systems Inc. | VX800v v1.0 | 0 – before 800.0.12 (0.12.0 3.0.0 v603c.0 Build 250912) |
Weakness: CWE-754 · Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N