Unrated severityNVD Advisory· Published Feb 3, 2026· Updated Mar 16, 2026

SSH Hostkey Misconfiguration Vulnerability in TP-Link Archer AX53

CVE-2025-62501

Description

SSH Hostkey misconfiguration vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows attackers to obtain device credentials through a specially crafted man‑in‑the‑middle (MITM) attack. This could enable unauthorized access if captured credentials are reused.This issue affects Archer AX53 v1.0: through 1.3.1 Build 20241120.

Affected products

TP-Link/Archer Ax53 Firmwarellm-fuzzy
Range: <=1.3.1 Build 20241120
TP-Link Systems Inc./Archer AX53 v1.0v5
Range: 0

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.tp-link.com/en/support/download/archer-ax53/v1/mitrepatch
www.tp-link.com/my/support/download/archer-ax53/v1/mitrepatch
www.tp-link.com/us/support/faq/4943/mitrevendor-advisory
talosintelligence.com/vulnerability_reports/mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000