TP-Link, Canva, Hik Vision vulnerabilities
Summary: Cisco Talos disclosed 19 vulnerabilities in Canva Affinity, 10 in the TP-Link Archer AX53 router, and one in HikVision's Ultra Face Recognition Terminal and Face Recognition Terminal for Turnstyle, all of which the vendors have patched. The Canva flaws include 18 out-of-bounds reads in EMF handling plus TALOS-2025-2297 (CVE-2025-66342), a type confusion that can lead to memory corruption and arbitrary code execution; the TP-Link issues include a stack-based buffer overflow in tdpServer (CVE-2025-62673), eight flaws in the tmpServer opcode, and an SSH hostkey misconfiguration (CVE-2025-62501) enabling credential leaks via man-in-the-middle attacks, while the HikVision flaw TALOS-2025-2281 (CVE-2025-66176) is a stack-based buffer overflow in SADP XML parsing that can lead to remote code execution.
Bottom line: The HikVision bug sits in face-recognition terminals used for authentication, and a single crafted network packet can reach remote code execution there; the TP-Link SSH hostkey misconfiguration can leak credentials through a man-in-the-middle attack on a router sitting at the edge of the network.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2025-62501CVE-2025-62673CVE-2025-66176CVE-2025-66342
- Related
- ⚡ Weekly Recap: Telecom Sleeper Cells, LLM Jailbreaks, Apple Forces U.K. Age Checks and More Cyber Risks ·⚡ Weekly Recap: Fortinet Exploits, Red Line Clipjack, NTLM Crack, Copilot Attack & More Cyber Risks ·Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026