CVE-2025-15542: Denial of Service (DoS) of VoIP Communication on TP-Link VX800v

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-01-29 · updated 2026-06-17
Weakness: CWE-754

Description

Improper handling of exceptional conditions in VX800v v1.0 in SIP processing allows an attacker to flood the device with crafted INVITE messages, blocking all voice lines and causing a denial of service on incoming calls.

Affected products

TP-Link Systems Inc. VX800v v1.0: before 800.0.12 — fixed in 800.0.12

How to fix

Upgrade to a fixed version: TP-Link Systems Inc. VX800v v1.0 800.0.12. Check the vendor advisory for mitigations.

References

https://www.tp-link.com/de/support/download/vx800v/#Firmware
https://www.tp-link.com/us/support/faq/4930/

Get alerted when CVE-2025-15542 or the next vulnerability affects your stack