What is the CVSS score of CVE-2025-62501?

CVE-2025-62501 has a CVSS 3.1 base score of 8.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Archer Ax53 Firmware are affected by CVE-2025-62501?

TP-Link Archer AX53 routers are vulnerable to credential theft through man-in-the-middle attacks, potentially compromising network access and sensitive data for any organization using this device.

How to fix or mitigate CVE-2025-62501?

Within 24 hours: Inventory all Archer AX53 devices in production and isolate them on segmented networks where possible. Within 7 days: Implement network segmentation to restrict direct internet access to affected devices, enable WPA3 encryption if available, and enforce strong administrative credentials (minimum 16 characters). Within 30 days: Evaluate replacement with patched router models or alternative vendors, contact TP-Link for patch ETA, and conduct network access reviews for unauthorized credential usage.

Archer Ax53 Firmware CVE-2025-62501

HIGH

Key Exchange without Entity Authentication (CWE-322)

2026-02-03 f23511db-6c3e-4e32-a477-6aa17d310630

TP-Link Authentication Bypass Archer Ax53 Firmware

8.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.1 HIGH

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Feb 03, 2026 - 19:16 nvd

HIGH 8.1

DescriptionCVE.org

SSH Hostkey misconfiguration vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows attackers to obtain device credentials through a specially crafted man‑in‑the‑middle (MITM) attack. This could enable unauthorized access if captured credentials are reused.This issue affects Archer AX53 v1.0: through 1.3.1 Build 20241120.

AnalysisAI

Archer Ax53 Firmware versions up to 1.0 contains a vulnerability that allows attackers to obtain device credentials through a specially crafted man‑in‑the‑middle (MITM) a (CVSS 8.1).

Technical ContextAI

affects Archer Ax53 Firmware. SSH Hostkey misconfiguration vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows attackers to obtain device credentials through a specially crafted man‑in‑the‑middle (MITM) attack. This could enable unauthorized access if captured credentials are reused.This issue affects Archer AX53 v1.0: through 1.3.1 Build 20241120.