Story perspectives

Critical TP-Link Router Vulnerabilities Expose Devices to Hacks

9/6/2025

Summary

CISA Warns Vulnerabilities

CISA identified two critical vulnerabilities in TP-Link routers, CVE-2025-9377 and CVE-2023-50224, requiring remediation by September 24, 2025.
These vulnerabilities enable OS command injection and authentication bypass, risking unauthorized access and device takeover.
Affected models, nearing end-of-life, lack manufacturer support, increasing exposure to exploits.
CISA also highlighted a severe flaw in a TP-Link Wi-Fi extender and a WhatsApp vulnerability linked to spyware.
Experts caution that unmanaged consumer devices elevate security risks for home and small business networks.

Summary

Google Enhances Android Security

Google launched a September 2025 Android update, fixing 120 vulnerabilities, including two zero-days (CVE-2025-38352, CVE-2025-48543) enabling privilege escalation.
Devices on Android versions 12-16 should install the update immediately to reduce risks.
CISA has prioritized CVE-2025-48543, urging organizations to implement mitigations by September 25, 2025.
The update addresses critical Qualcomm vulnerabilities and a remote code execution risk (CVE-2025-48539).
Manufacturers like Xiaomi and Samsung are also releasing updates, enhancing overall Android security.

1 of 2

CISA Warns Vulnerabilities

CISA identified two critical vulnerabilities in TP-Link routers, CVE-2025-9377 and CVE-2023-50224, requiring remediation by September 24, 2025.
These vulnerabilities enable OS command injection and authentication bypass, risking unauthorized access and device takeover.
Affected models, nearing end-of-life, lack manufacturer support, increasing exposure to exploits.
CISA also highlighted a severe flaw in a TP-Link Wi-Fi extender and a WhatsApp vulnerability linked to spyware.
Experts caution that unmanaged consumer devices elevate security risks for home and small business networks.

1 / 2