Hard-coded Credentials in TP-Link Archer C50 and Versions by TP-Link
CVE-2025-6982
6.9MEDIUM
Key Information:
- Vendor
Tp-link Systems Inc.
- Vendor
- CVE Published:
- 16 July 2025
What is CVE-2025-6982?
A vulnerability exists in the TP-Link Archer C50 router models where hard-coded credentials can be exploited to decrypt sensitive configuration files, such as config.xml. This flaw potentially allows unauthorized users to gain access to network configurations and sensitive information, undermining the security of the devices.
Affected Version(s)
Archer C20 V5 0
Archer C20 V5 0
Archer C50 V3 0 <= 180703