CVE-2025-15605

Katalog CVE

CVSS 7.3 · High EPSS 0,13%

Kerentanan Use of Hard-coded Cryptographic Key pada tp-link archer nx600 firmware, tp-link archer nx500 firmware +2 lainnya. Skor CVSS 3.1 7.3 (High) menurut NVD.

Deskripsi (NVD)

A hardcoded cryptographic key within the configuration mechanism on TP-Link Archer NX200, NX210, NX500 and NX600 enables decryption and re-encryption of device configuration data. An authenticated attacker may decrypt configuration files, modify them, and re-encrypt them, affecting the confidentiality and integrity of device configuration data.

Rincian

Terbit di NVD

23 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.3 (High), sumber NVD
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-321: Use of Hard-coded Cryptographic Key
CWE-798: Use of Hard-coded Credentials

EPSS (30 hari)

0,13% peluang dieksploitasi; lebih tinggi dari 2,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.tp-link.com/us/support/faq/5027/ advisory vendor
• https://www.tp-link.com/en/support/download/archer-nx200/#Firmware product
• https://www.tp-link.com/en/support/download/archer-nx210/#Firmware product
• https://www.tp-link.com/en/support/download/archer-nx500/#Firmware product
• https://www.tp-link.com/en/support/download/archer-nx600/#Firmware product