Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-6982

Hardcoded DES Decryption Keys in TP-Link Archer C50 V3/V4/V5 and C20 V5

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TPLink

Description

Use of Hard-coded Credentials in TP-Link Archer C50 V3( <= 180703)/V4( <= 250117 )/V5( <= 200407 ), and C20 V5 (<US_V5_260419 or <EU_V5_260317) allows attackers to decrypt the config.xml files.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TP-Link Systems Inc. Archer C50 V3

Default version status: unaffected

  • 0 to ≤ 180703affected

TP-Link Systems Inc. Archer C50 V4

Default version status: unaffected

  • 0 to ≤ 250117affected

TP-Link Systems Inc. Archer C50 V5

Default version status: unaffected

  • 0 to ≤ 200407affected

TP-Link Systems Inc. Archer C20 V5

Default version status: unaffected

  • 0 to < US_V5_260419affected
  • 0 to < EU_V5_260317affected

References