CyberSecBulletin
CVE-2025-62501NVD status: Modified

Archer AX53 v1.0: Key Exchange without Entity Authentication

Published Updated By the CyberSecBulletin desk

CVE-2025-62501 is a high-severity key exchange without entity authentication vulnerability in Archer AX53 v1.0 from TP-Link, with a CVSS 3.1 base score of 8.1 out of 10. It can be exploited remotely over the network by an unauthenticated attacker, without any action from a user. Affected Archer AX53 v1.0 versions: 1.3.1 Build 20241120 and earlier. The record does not name a fixed version, so check the vendor advisory. There is no confirmed exploitation so far. EPSS estimates a 0.55% chance of exploitation within 30 days, which is low compared with other CVEs.

Next patch cycle

High severity with no evidence of exploitation so far.

What to do

  1. Update Archer BE3600 v1 to (KR)_1.2.2 Build 20260903 or a later version.
  2. Update Archer BE3600 v1.2 to (KR)_1.2.2 Build 20260903 or a later version.
  3. Read the advisory on tp-link.com for workarounds and exact fixed builds.
  4. Until you can update, restrict network access to the affected service so it is not reachable from untrusted networks.

Affected products and versions

VendorProductAffected versionsFixed in
TP-LinkArcher AX53 v1.01.3.1 Build 20241120 and earlierNot stated
TP-LinkArcher BE3600 v1before (KR)_1.2.2 Build 20260903(KR)_1.2.2 Build 20260903
TP-LinkArcher BE3600 v1.2before (KR)_1.2.2 Build 20260903(KR)_1.2.2 Build 20260903
TP-LinkArcher Ax53 Firmware1.0Not stated

Version data comes from the organisation that assigned the CVE. Confirm against the vendor advisory before deciding you are unaffected.

How the severity score breaks down

Attack vector
NetworkCan be exploited remotely over a network, including the internet.
Attack complexity
HighSuccess depends on conditions outside the attacker's control.
Privileges required
NoneNo account or login is needed.
User interaction
NoneNo action by a victim is required.
Scope
UnchangedImpact stays within the vulnerable component.
Confidentiality
HighAll data handled by the component can be read.
Integrity
HighData or code can be modified at will.
Availability
HighThe component can be taken down completely.

Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. Scored by NVD.

Scoring systemScoreSeverityScored by
CVSS 4.07.0HighCNA
CVSS 3.18.1HighNVD

Official description

SSH Hostkey misconfiguration vulnerability in Archer AX53 and Archer BE3600 (tmpserver modules) allows attackers to obtain device credentials through a specially crafted man‑in‑the‑middle (MITM) attack. This could enable unauthorized access if captured credentials are reused.

Source: the CVE record as published by its numbering authority, via NVD and CVE.org.

The underlying weakness: Key Exchange without Entity Authentication

The product performs a key exchange with an actor without verifying the identity of that actor.

How developers prevent this class of flaw

  • Ensure that proper authentication is included in the system design.
  • Understand and properly implement all checks necessary to ensure the identity of entities involved in encrypted communications.

More Key Exchange without Entity Authentication vulnerabilities (CWE-322)

Timeline

  1. CVE record published.
  2. CISA published its SSVC assessment (exploitation: none, automatable: no, technical impact: total).
  3. Record last changed materially (score, affected products, status or references).

References

Third-party and government advisories

Other vulnerabilities in Archer AX53 v1.0

All Archer AX53 v1.0 vulnerabilities

Recent Key Exchange without Entity Authentication vulnerabilities

Spotted an error? Tell us.