TP-Link Systems Inc. Archer Mr200 Firmware vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting TP-Link Systems Inc. Archer Mr200 Firmware: 1 record(s), with affected versions and fixes.
cpe:2.3:o:tp-link:archer_mr200_firmware

CVE-2025-15551 Medium · 5.6 CWE-95 Feb 5, 2026

LAN Code Execution on TP-Link Archer MR200, Archer C20, TL-WR850N and TL-WR845N

The response coming from TP-Link Archer MR200 v5.2, C20 v5 and v6, TL-WR850N v3, and TL-WR845N v4 for any request is getting executed by the JavaScript function like eval directly without any check. Attackers can exploit this vulnerability via a Man-in-the-Middle (MitM) attack to execute JavaScript code on the router's admin web portal without the user's permission or knowledge.