CVE-2025-62501
Unknown Unknown - Not Provided

SSH Hostkey Misconfiguration in TP-Link Archer AX53 Enables Credential Theft

Publication date: 2026-02-03

Last updated on: 2026-03-16

Assigner: TPLink

Description
SSH Hostkey misconfiguration vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows attackers to obtain device credentials through a specially crafted man‑in‑the‑middle (MITM) attack. This could enable unauthorized access if captured credentials are reused.This issue affects Archer AX53 v1.0: through 1.3.1 Build 20241120.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-02-03
Last Modified
2026-03-16
Generated
2026-07-06
AI Q&A
2026-02-04
EPSS Evaluated
2026-07-05
NVD
CVE-2025-62501
EUVD
EUVD-2025-206674

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
tp-link archer_ax53_firmware 1.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-322 The product performs a key exchange with an actor without verifying the identity of that actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an SSH Hostkey misconfiguration in the TP-Link Archer AX53 version 1.0 (tmpserver modules). It allows attackers to perform a specially crafted man-in-the-middle (MITM) attack to obtain device credentials.

If attackers capture these credentials, they could potentially reuse them to gain unauthorized access to the device.

The affected versions are Archer AX53 v1.0 through 1.3.1 Build 20241120.

Impact Analysis

This vulnerability can impact you by allowing attackers to obtain your device credentials through a man-in-the-middle attack.

If attackers reuse these captured credentials, they could gain unauthorized access to your device, potentially compromising your network security.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-62501. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart