← Database

CVE-2025-15605

HIGH CVSS: 7.3 Published: 2026-03-23 Modified: 2026-06-17

Description

A hardcoded cryptographic key within the configuration mechanism on TP-Link Archer NX200, NX210, NX500 and NX600 enables decryption and re-encryption of device configuration data. An authenticated attacker may decrypt configuration files, modify them, and re-encrypt them, affecting the confidentiality and integrity of device configuration data.

Affected Platforms

Tp-Link Archer Nx600Tp-Link Archer Nx500Tp-Link Archer Nx200Tp-Link Archer Nx210 FirmwareTp-Link Archer Nx500 FirmwareTp-Link Archer Nx210Tp-Link Archer Nx600 FirmwareTp-Link Archer Nx200 Firmware

Weakness Type

CWE-321, CWE-798

References