Skip to content

CyberSIXT Search

TP-Link product

Archer NX600

← All TP-Link products

No Archer NX600 CVE is in the CISA KEV catalogue.

Tracked since 25 Mar · latest article Fri 27 Mar · RSS

Open KEV deadlines: 0; None open
Added to KEV · 90 days: 0; of 0 all time
High exploit odds · current: 0; high · not in KEV
Articles · 7 days: 0; usual rate

Exploited, by due date

No Archer NX600 CVE is in the CISA KEV catalogue.

Coverage

2 articles · all timeFull timeline →

Two articles so far, 25 Mar to 27 Mar.

Wed 25 Mar · first reportPatch now: TP-Link Archer NX routers vulnerable to firmware takeoverSecurity Affairs
Fri 27 MarTP-Link Patches High-Severity Router VulnerabilitiesSecurityWeek

See the full timeline

27 MarTP-Link Patches High-Severity Router VulnerabilitiesSecurityWeek
25 MarPatch now: TP-Link Archer NX routers vulnerable to firmware takeoverSecurity Affairs

All CVEs in coverage

4

CVE-2025-15517Authorization Bypass in HTTP Server Endpoints on TP-Link Archer NX200, NX210, NX500 and NX600CVSS8.6High–Not in KEV3.1%EPSS2articles

CVE-2025-15519Command Injection in Modem Management CLI on TP-Link Archer NX200, NX210, NX500 and NX600CVSS8.5High–Not in KEV0.7%EPSS1article

CVE-2025-15518Command Injection in Wireless Control CLI on TP-Link Archer NX200, NX210, NX500 and NX600CVSS8.5High–Not in KEV0.7%EPSS1article

CVE-2025-15605Hardcoded Cryptographic Key in Configuration Encryption Mechanism on TP-Link Archer NX200, NX210, NX500 and NX600CVSS8.5High–Not in KEV0.1%EPSS2articles

How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.