PT-2026-27165 · Tp Link Systems · Archer Nx200 V1.0+10

Saifeldeen Aziz · Published 2026-03-23 · Updated 2026-03-23 · CVE-2025-15605

NVD

CVSS v4.0

8.5

High

AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

A hardcoded cryptographic key within the configuration mechanism on TP-Link Archer NX200, NX210, NX500 and NX600 enables decryption and re-encryption of device configuration data. An authenticated attacker may decrypt configuration files, modify them, and re-encrypt them, affecting the confidentiality and integrity of device configuration data.

Fix

Weakness Enumeration

CWE-321

Related Identifiers

CVE-2025-15605

Affected Products

Archer Nx200 V1.0

Archer Nx200 V2.0

Archer Nx200 V2.20

Archer Nx200 V3.0

Archer Nx210 V2.0 V2.20

Archer Nx210 V3.0

Archer Nx500 V1.0

Archer Nx500 V2.0

Archer Nx600 V1.0

Archer Nx600 V2.0

Archer Nx600 V3.0

References · 6

• https://tp-link.com/en/support/download/archer-nx210/#Firmware · Patch
• https://tp-link.com/en/support/download/archer-nx600/#Firmware · Patch
• https://tp-link.com/en/support/download/archer-nx200/#Firmware · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-15605 · Security Note
• https://tp-link.com/en/support/download/archer-nx500/#Firmware · Patch
• https://tp-link.com/us/support/faq/5027 · Vendor Advisory