CVE-2025-62501

HIGH

TP-Link Archer AX53 <1.3.1 - Info Disclosure

Title source: llm

Description

SSH Hostkey misconfiguration vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows attackers to obtain device credentials through a specially crafted man‑in‑the‑middle (MITM) attack. This could enable unauthorized access if captured credentials are reused.This issue affects Archer AX53 v1.0: through 1.3.1 Build 20241120.

References (4)

Scores

CVSS v3 8.1
EPSS 0.0002
EPSS Percentile 5.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-322
Status published

Affected Products (1)

tp-link/archer_ax53_firmware

Timeline

Published Feb 03, 2026
Tracked Since Feb 18, 2026