Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A weakness in the web interface’s application layer encryption in VX800v v1.0 allows an adjacent attacker to brute force the weak AES key and decrypt intercepted traffic. Successful exploitation requires network proximity but no authentication, and may result in high impact to confidentiality, integrity, and availability of transmitted data.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
CVE-2025-13399 Weak AES Key Encryption Vulnerability in VX800v Web Interface v1.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-13399
Post summary
CVE-2025-13399 announces a weak AES key encryption flaw in the VX800v Web Interface v1.0, documented on VulMon.
CVE-2025-13399 A weakness in the web interface’s application layer encryption in VX800v v1.0 allows an adjacent attacker to brute force the weak AES key and decrypt intercepted traf… https://www.cve.org/CVERecord?id=CVE-2025-13399
Post summary
The passage announces CVE‑2025‑13399, noting a weak AES key that can be brute‑forced to decrypt traffic, without offering a PoC, exploit, or patch information.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tp-link | vx800v | 1.0 | - | - |
| OS | tp-link | vx800v_firmware | - | - | - |