CVE-2025-6982: Hardcoded DES Decryption Keys in TP-Link Archer C50 V3/V4/V5 and C20 V5
Use of Hard-coded Credentials in TP-Link Archer C50 V3(
<=
180703)/V4(
<=
250117
)/V5(
<=
200407
), and C20 V5 (<USV5260419 or <EUV5260317) allows attackers to decrypt the config.xml files.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Hardening/mitigation requested in the material is to address the ability to decrypt config.xml files due to hardcoded DES decryption keys and hardcoded credentials in TP-Link Archer C50 V3/V4/V5 and C20 V5; however the provided excerpt does not include any vendor patch identifiers or fixed firmware versions to upgrade to, nor any specific configuration setting to change. No actionable remediation steps can be extracted from the text shown.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6982?
CVE-2025-6982 has a high severity rating due to the use of hard-coded credentials that can be exploited by attackers.
How do I fix CVE-2025-6982?
To mitigate CVE-2025-6982, update your TP-Link Archer C50 router to the latest firmware version provided by TP-Link.
What devices are affected by CVE-2025-6982?
CVE-2025-6982 affects TP-Link Archer C50 V3, V4, and V5 models up to specific firmware versions.
What is the impact of CVE-2025-6982?
The impact of CVE-2025-6982 allows attackers to decrypt sensitive config.xml files, potentially compromising network security.
Is it safe to use TP-Link Archer C50 devices affected by CVE-2025-6982?
It is not safe to use affected TP-Link Archer C50 devices without applying the necessary firmware updates to address CVE-2025-6982.