SSH Hostkey Misconfiguration in TP-Link Archer AX53 Products

CVE-2025-62501

What is CVE-2025-62501?

A vulnerability exists in the TP-Link Archer AX53 v1.0 specifically within the tmpserver modules, which relies on improper SSH hostkey configuration. This security flaw can be exploited through a crafted man-in-the-middle (MITM) attack. An adversary could intercept communications during the SSH handshake process, allowing them to capture device credentials. If these credentials are reused, attackers can gain unauthorized access, posing a significant risk to the integrity and security of user data. Users are advised to review their configurations and apply the necessary firmware updates to mitigate this vulnerability.

References