CVE-2025-15608
Stack-Based Buffer Overflow in AX53 Probe Handling Enables RCE
Publication date: 2026-03-20
Last updated on: 2026-04-02
Assigner: TPLink
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| tp-link | archer_ax53_firmware | 1.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-121 | A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2025-15608 is a buffer overflow vulnerability in the TP-Link Archer AX53 v1 router caused by insufficient input sanitization in the device’s network probe handling function.
Unvalidated parameters in the probe handling logic can trigger a stack-based buffer overflow, which leads to service crashes.
Under certain complex heap-spray attack conditions, this vulnerability may enable remote code execution, allowing an attacker to gain control of the device.
How can this vulnerability impact me? :
Successful exploitation of this vulnerability can cause repeated service unavailability due to crashes.
In certain scenarios, an attacker may gain control of the affected device by executing remote code.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
[{'type': 'paragraph', 'content': "This vulnerability results in service crashes due to a stack-based buffer overflow triggered by unvalidated parameters in the device's probe handling logic."}, {'type': 'paragraph', 'content': 'Detection can involve monitoring the affected device (TP-Link Archer AX53 v1) for repeated service unavailability or crashes related to network probe handling.'}, {'type': 'paragraph', 'content': 'Specific commands or detection tools are not provided in the available resources.'}] [1]
What immediate steps should I take to mitigate this vulnerability?
Users are strongly advised to update the firmware of the TP-Link Archer AX53 v1 router to the latest version, specifically to versions later than 251029.
Updating the firmware mitigates the buffer overflow vulnerability and prevents potential remote code execution attacks.