A hardcoded cryptographic key within the configuration mechanism on TP-Link Archer NX200, NX210, NX500 and NX600 enables decryption and re-encryption of device configuration data. An authenticated attacker may decrypt configuration files, modify them, and re-encrypt them, affecting the confidentiality and integrity of device configuration data.
PUBLISHED5.2CWE-321
Hardcoded Cryptographic Key in Configuration Encryption Mechanism on TP-Link Archer NX200, NX210, NX500 and NX600
Problem type
Affected products
TP-Link Systems Inc.
Archer NX600 v3.0
< 1.3.0 Build 260309 - AFFECTED
Archer NX600 v2.0
< 1.3.0 Build 260311 - AFFECTED
Archer NX600 v1.0
< 1.4.0 Build 260311 - AFFECTED
Archer NX500 v2.0
< < 1.5.0 Build 260309 - AFFECTED
Archer NX500 v1.0
< 1.3.0 Build 260311 - AFFECTED
Archer NX210 v3.0
< 1.3.0 Build 260309 - AFFECTED
Archer NX210 v2.0 v2.20
< 1.3.0 Build 260311 - AFFECTED
Archer NX200 v3.0
< < 1.3.0 Build 260309 - AFFECTED
Archer NX200 v2.20
< 1.3.0 Build 260311 - AFFECTED
Archer NX200 v2.0
< 1.3.0 Build 260311 - AFFECTED
Archer NX200 v1.0
< 1.8.0 Build 260311 - AFFECTED
References
tp-link.com
https://www.tp-link.com/en/support/download/archer-nx200/#Firmware
tp-link.com
https://www.tp-link.com/en/support/download/archer-nx210/#Firmware
tp-link.com
https://www.tp-link.com/en/support/download/archer-nx500/#Firmware
tp-link.com
https://www.tp-link.com/en/support/download/archer-nx600/#Firmware
tp-link.com
https://www.tp-link.com/us/support/faq/5027/
GitHub Security Advisories
GHSA-46q8-mxmv-wf7q
A hardcoded cryptographic key within the configuration mechanism on TP-Link Archer NX200, NX210,...
https://github.com/advisories/GHSA-46q8-mxmv-wf7qA hardcoded cryptographic key within the configuration mechanism on TP-Link Archer NX200, NX210, NX500 and NX600 enables decryption and re-encryption of device configuration data. An authenticated attacker may decrypt configuration files, modify them, and re-encrypt them, affecting the confidentiality and integrity of device configuration data.
nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2025-15605
tp-link.com
https://www.tp-link.com/en/support/download/archer-nx200/#Firmware
tp-link.com
https://www.tp-link.com/en/support/download/archer-nx210/#Firmware
tp-link.com
https://www.tp-link.com/en/support/download/archer-nx500/#Firmware
tp-link.com
https://www.tp-link.com/en/support/download/archer-nx600/#Firmware
tp-link.com
https://www.tp-link.com/us/support/faq/5027
github.com
https://github.com/advisories/GHSA-46q8-mxmv-wf7q
JSON source
https://cveawg.mitre.org/api/cve/CVE-2025-15605Click to expand
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2025-15605",
"assignerOrgId": "f23511db-6c3e-4e32-a477-6aa17d310630",
"assignerShortName": "TPLink",
"dateUpdated": "2026-03-23T19:16:55.180Z",
"dateReserved": "2026-03-09T17:31:03.466Z",
"datePublished": "2026-03-23T18:02:01.109Z",
"state": "PUBLISHED"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "f23511db-6c3e-4e32-a477-6aa17d310630",
"shortName": "TPLink",
"dateUpdated": "2026-03-23T18:02:01.109Z"
},
"title": "Hardcoded Cryptographic Key in Configuration Encryption Mechanism on TP-Link Archer NX200, NX210, NX500 and NX600",
"descriptions": [
{
"lang": "en",
"value": "A hardcoded cryptographic key within the configuration mechanism on TP-Link Archer NX200, NX210, NX500 and NX600 enables decryption and re-encryption of device configuration data. An authenticated attacker may decrypt configuration files, modify them, and re-encrypt them, affecting the confidentiality and integrity of device configuration data.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "A hardcoded cryptographic key within the configuration mechanism on TP-Link Archer NX200, NX210, NX500 and NX600 enables decryption and re-encryption of device configuration data. An authenticated attacker may decrypt configuration files, modify them, and re-encrypt them, affecting the confidentiality and integrity of device configuration data."
}
]
}
],
"affected": [
{
"vendor": "TP-Link Systems Inc.",
"product": "Archer NX600 v3.0",
"platforms": [
"Linux"
],
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"status": "affected",
"versionType": "custom",
"lessThan": "1.3.0 Build 260309"
}
]
},
{
"vendor": "TP-Link Systems Inc.",
"product": "Archer NX600 v2.0",
"platforms": [
"Linux"
],
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"status": "affected",
"versionType": "custom",
"lessThan": "1.3.0 Build 260311"
}
]
},
{
"vendor": "TP-Link Systems Inc.",
"product": "Archer NX600 v1.0",
"platforms": [
"Linux"
],
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"status": "affected",
"versionType": "custom",
"lessThan": "1.4.0 Build 260311"
}
]
},
{
"vendor": "TP-Link Systems Inc.",
"product": "Archer NX500 v2.0",
"platforms": [
"Linux"
],
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"status": "affected",
"versionType": "custom",
"lessThan": "< 1.5.0 Build 260309"
}
]
},
{
"vendor": "TP-Link Systems Inc.",
"product": "Archer NX500 v1.0",
"platforms": [
"Linux"
],
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"status": "affected",
"versionType": "custom",
"lessThan": "1.3.0 Build 260311"
}
]
},
{
"vendor": "TP-Link Systems Inc.",
"product": "Archer NX210 v3.0",
"platforms": [
"Linux"
],
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"status": "affected",
"versionType": "custom",
"lessThan": "1.3.0 Build 260309"
}
]
},
{
"vendor": "TP-Link Systems Inc.",
"product": "Archer NX210 v2.0 v2.20",
"platforms": [
"Linux"
],
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"status": "affected",
"versionType": "custom",
"lessThan": "1.3.0 Build 260311"
}
]
},
{
"vendor": "TP-Link Systems Inc.",
"product": "Archer NX200 v3.0",
"platforms": [
"Linux"
],
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"status": "affected",
"versionType": "custom",
"lessThan": "< 1.3.0 Build 260309"
}
]
},
{
"vendor": "TP-Link Systems Inc.",
"product": "Archer NX200 v2.20",
"platforms": [
"Linux"
],
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"status": "affected",
"versionType": "custom",
"lessThan": "1.3.0 Build 260311"
}
]
},
{
"vendor": "TP-Link Systems Inc.",
"product": "Archer NX200 v2.0",
"platforms": [
"Linux"
],
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"status": "affected",
"versionType": "custom",
"lessThan": "1.3.0 Build 260311"
}
]
},
{
"vendor": "TP-Link Systems Inc.",
"product": "Archer NX200 v1.0",
"platforms": [
"Linux"
],
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"status": "affected",
"versionType": "custom",
"lessThan": "1.8.0 Build 260311"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "CWE-321 Use of Hard-coded Cryptographic Key",
"cweId": "CWE-321",
"type": "CWE"
}
]
}
],
"references": [
{
"url": "https://www.tp-link.com/en/support/download/archer-nx200/#Firmware",
"tags": [
"patch"
]
},
{
"url": "https://www.tp-link.com/en/support/download/archer-nx210/#Firmware",
"tags": [
"patch"
]
},
{
"url": "https://www.tp-link.com/en/support/download/archer-nx500/#Firmware",
"tags": [
"patch"
]
},
{
"url": "https://www.tp-link.com/en/support/download/archer-nx600/#Firmware",
"tags": [
"patch"
]
},
{
"url": "https://www.tp-link.com/us/support/faq/5027/",
"tags": [
"vendor-advisory"
]
}
],
"impacts": [
{
"capecId": "CAPEC-37",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-37 Retrieve Embedded Sensitive Data"
}
]
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "Saifeldeen Aziz from Cyshield",
"type": "finder"
}
]
},
"adp": [
{
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-03-23T19:16:55.180Z"
},
"title": "CISA ADP Vulnrichment",
"metrics": [
{}
]
}
]
}
}