A hardcoded cryptographic key within the configuration mechanism on TP-Link Archer NX200, NX210, NX500 and NX600 enables decryption and re-encryption of device configuration data. An authenticated attacker may decrypt configuration files, modify them, and re-encrypt them, affecting the confidentiality and integrity of device configuration data.

Project Subscriptions

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Tue, 24 Mar 2026 10:45:00 +0000

Type Values Removed Values Added
First Time appeared Tp-link
Tp-link archer Nx200 V1.0
Tp-link archer Nx200 V2.0
Tp-link archer Nx200 V2.20
Tp-link archer Nx200 V3.0
Tp-link archer Nx210 V2.0 V2.20
Tp-link archer Nx210 V3.0
Tp-link archer Nx500 V1.0
Tp-link archer Nx500 V2.0
Tp-link archer Nx600 V1.0
Tp-link archer Nx600 V2.0
Tp-link archer Nx600 V3.0
Vendors & Products Tp-link
Tp-link archer Nx200 V1.0
Tp-link archer Nx200 V2.0
Tp-link archer Nx200 V2.20
Tp-link archer Nx200 V3.0
Tp-link archer Nx210 V2.0 V2.20
Tp-link archer Nx210 V3.0
Tp-link archer Nx500 V1.0
Tp-link archer Nx500 V2.0
Tp-link archer Nx600 V1.0
Tp-link archer Nx600 V2.0
Tp-link archer Nx600 V3.0

Mon, 23 Mar 2026 19:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Mon, 23 Mar 2026 18:15:00 +0000

Type Values Removed Values Added
Description A hardcoded cryptographic key within the configuration mechanism on TP-Link Archer NX200, NX210, NX500 and NX600 enables decryption and re-encryption of device configuration data. An authenticated attacker may decrypt configuration files, modify them, and re-encrypt them, affecting the confidentiality and integrity of device configuration data.
Title Hardcoded Cryptographic Key in Configuration Encryption Mechanism on TP-Link Archer NX200, NX210, NX500 and NX600
Weaknesses CWE-321
References
Metrics cvssV4_0

{'score': 8.5, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N'}


Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: TPLink

Published:

Updated: 2026-03-24T03:56:03.860Z

Reserved: 2026-03-09T17:31:03.466Z

Link: CVE-2025-15605

cve-icon Vulnrichment

Updated: 2026-03-23T19:07:25.221Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-03-23T18:16:24.067

Modified: 2026-03-24T15:54:09.400

Link: CVE-2025-15605

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-03-24T10:33:27Z

Weaknesses