Tp-Link Systems Inc Ax53 V1 vulnerabilities

CVE-2025-15607 [CRITICAL] CWE-77 CVE-2025-15607: A command injection vulnerability on AX53 v1 occurs in mscd debug functionality due to insufficient A command injection vulnerability on AX53 v1 occurs in mscd debug functionality due to insufficient input handling, allowing log redirection to arbitrary files and concatenation of unvalidated file content into shell commands, enabling authenticated attackers to inject and execute arbitrary commands. Successful exploitation may allow execution of ma

CVE-2025-15608 [CRITICAL] CWE-121 CVE-2025-15608: This vulnerability in AX53 v1 results from insufficient input sanitization in the device’s probe han This vulnerability in AX53 v1 results from insufficient input sanitization in the device’s probe handling logic, where unvalidated parameters can trigger a stack-based buffer overflow that causes the affected service to crash and, under specific conditions, may enable remote code execution through complex heap-spray techniques. Successful exploit