CVE-2025-62501

HIGH7.0

SSH Hostkey Misconfiguration Vulnerability in TP-Link Archer AX53

Published Feb 3, 2026

Modified 6 days ago

Details

SSH Hostkey misconfiguration vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows attackers to obtain device credentials through a specially crafted man‑in‑the‑middle (MITM) attack. This could enable unauthorized access if captured credentials are reused.This issue affects Archer AX53 v1.0: through 1.3.1 Build 20241120.

References

WEB

https://talosintelligence.com/vulnerability_reports/

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2025-62501

FIX

https://www.tp-link.com/en/support/download/archer-ax53/v1/#Firmware

FIX

https://www.tp-link.com/my/support/download/archer-ax53/v1/#Firmware

ADVISORY

https://www.tp-link.com/us/support/faq/4943/

CVSS Analysis