216.73.217.22

CVE-2025-15605

· Published 23/03/2026 18:16 · Modified 24/03/2026 15:54

Labels: CVE-2025-15605 2026-03-23CVE-2025-15605CWE-321f23511db-6c3e-4e32-a477-6aa17d310630

Essential information

Published
23/03/2026 18:16
Modified
24/03/2026 15:54
Author
—
Creator
—
CVSS
8.5 HIGH (v3) 8.5 HIGH (v4.0)
CISA KEV
No
CWE
—
CVSS vector
—

CVSS metrics

Description

A hardcoded cryptographic key within the configuration mechanism on TP-Link Archer NX200, NX210, NX500 and NX600 enables decryption and re-encryption of device configuration data. An authenticated attacker may decrypt configuration files, modify them, and re-encrypt them, affecting the confidentiality and integrity of device configuration data.

NVD status

Status
Awaiting Analysis — CVE has been recently published to the CVE List and has been received by the NVD.
Source
f23511db-6c3e-4e32-a477-6aa17d310630
NVD
View on NVD

Affected products (CPE)

ProductCPE
tp-link / archer nx200 cpe:2.3:a:tp-link:archer_nx200:*:*:*:*:*:*:*:*
tp-link / archer nx210 cpe:2.3:a:tp-link:archer_nx210:*:*:*:*:*:*:*:*
tp-link / archer nx500 cpe:2.3:a:tp-link:archer_nx500:*:*:*:*:*:*:*:*
tp-link / archer nx600 cpe:2.3:a:tp-link:archer_nx600:*:*:*:*:*:*:*:*

References