8.5 HighCWE-321
CVE-2025-15605
No description published yet
Vendor not yet named
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 23 Oct
0.1%probability of exploitation in the next 30 days
Higher than 3% of scored CVEs
SeverityCVSS
8.5High
Description NVD
A hardcoded cryptographic key within the configuration mechanism on TP-Link Archer NX200, NX210, NX500 and NX600 enables decryption and re-encryption of device configuration data. An authenticated attacker may decrypt configuration files, modify them, and re-encrypt them, affecting the confidentiality and integrity of device configuration data.
Coverage 2 articles · 2 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Wed 25 Mar · 15:48 UTC | Security Affairs | Patch now: TP-Link Archer NX routers vulnerable to firmware takeover |
| Fri 27 Mar · 12:10 UTC | SecurityWeek | TP-Link Patches High-Severity Router Vulnerabilities |
- TP-Link Patches High-Severity Router VulnerabilitiesSecurityWeek · mentions it in passing
- Patch now: TP-Link Archer NX routers vulnerable to firmware takeoverSecurity Affairs · first in our coverage · mentions it in passing