CVE-2025-15607

Authenticated Command Injection in mcsd Service of TP-Link Archer AX53

State: Published
Severity: 7.3 High
Published: Mar 20, 2026
Updated: Mar 23, 2026
Reserved: Mar 10, 2026

Description

A command injection vulnerability on AX53 v1 occurs in mscd debug functionality due to insufficient input handling, allowing log redirection to arbitrary files and concatenation of unvalidated file content into shell commands, enabling authenticated attackers to inject and execute arbitrary commands. Successful exploitation may allow execution of malicious commands and ultimately full control of the device.

Scores

CVSS	Score	Vector	Source
4.0	7.3 High	CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L	TPLink

Weaknesses

CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')

Affected Products

Product	Versions
AX53 v1TP-Link Systems Inc.	before 251029Affected

References

https://www.tp-link.com/en/support/download/archer-ax53/v1/#Firmwarepatch
https://www.tp-link.com/us/support/faq/5025/vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.