Vulnerability · Published Jul 16, 2025 · Assigned by TPLink

CVE-2025-6983Clickjacking vulnerability on the management web application of TP-LINK Archer C1200

Medium 5.1

In plain English

A medium-severity security flaw in Archer C1200 from TP-Link System Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 40% of all known vulnerabilities).

Severity (CVSS 4.0)5.1Medium
Exploit odds (30 days)0.5%top 60.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A Clickjacking vulnerability in TP-Link Archer C1200 web management page allows an attacker to trick users into performing unintended actions via rendered UI layers or frames.This issue affects Archer C1200 <= 1.1.5.

Affected products (as reported)

VendorProductVersions
TP-Link System Inc. Archer C1200 0 – through 1.1.5

Weakness: CWE-1021 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

References