Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper link resolution in the VX800v v1.0 SFTP service allows authenticated adjacent attackers to use crafted symbolic links to access system files, resulting in high confidentiality impact and limited integrity risk.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
CVE-2025-15541 Symbolic Link Vulnerability in VX800v v1.0 SFTP Service Enables Unauthorized File Access https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-15541
Post summary
The snippet announces the discovery of a symbolic link vulnerability in the VX800v SFTP service that permits unauthorized file access, but provides no evidence of exploitation, patches, or proof‑of‑concept.
CVE-2025-15541 Improper link resolution in the VX800v v1.0 SFTP service allows authenticated adjacent attackers to use crafted symbolic links to access system files, resulting in hi… https://www.cve.org/CVERecord?id=CVE-2025-15541
Post summary
The text provides a concise disclosure of CVE-2025-15541, detailing an improper link resolution flaw in the VX800v SFTP service that permits authenticated adjacent attackers to read system files via crafted symbolic links, with no PoC, exploit code, patch, or evidence of active exploitation mentioned.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tp-link | vx800v | 1.0 | - | - |
| OS | tp-link | vx800v_firmware | - | - | - |