---
id: CVE-2025-62501
title: SSH Hostkey Misconfiguration Vulnerability in Archer Devices
summary: "SSH Hostkey misconfiguration vulnerability in Archer AX53 and Archer BE3600 (tmpserver modules) allows attackers to obtain device credentials through a specially crafted man‑in‑the‑middle (MITM) attack.\_This could enable unauthorized acc…"
severity: high
cvss: 7
cvssVector: 'CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'
cvssSource: cna
cwe:
  - CWE-322
vendor: TP-Link Systems Inc.
product: Archer AX53 v1.0
affected:
  - archer_ax53_v1.0 <= 1.3.1 Build 20241120
  - archer_be3600_v1 < (KR)_1.2.2 Build 20260903
  - archer_be3600_v1.2 < (KR)_1.2.2 Build 20260903
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-02-04T04:56:02.326339Z'
published: '2026-02-03'
updated: '2026-10-22'
sourceUpdated: '2026-10-22T00:17:14.305Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-62501'
references:
  - url: 'https://talosintelligence.com/vulnerability_reports/'
  - url: 'https://www.tp-link.com/en/support/download/archer-ax53/v1/#Firmware'
  - url: 'https://www.tp-link.com/my/support/download/archer-ax53/v1/#Firmware'
  - url: 'https://www.tp-link.com/us/support/faq/4943/'
  - url: 'https://www.tp-link.com/kr/support/download/archer-be3600/v1/#Firmware'
  - url: 'https://www.tp-link.com/kr/support/download/archer-be3600/v1.20/#Firmware'
tags:
  - cve.org
epss: 0.00504
epssPercentile: 0.42131
ingestedAt: '2026-10-21T19:10:31.412Z'
---

## Overview

SSH Hostkey misconfiguration vulnerability in Archer AX53 and Archer BE3600 (tmpserver modules) allows attackers to obtain device credentials through a specially crafted man‑in‑the‑middle (MITM) attack. This could enable unauthorized access if captured credentials are reused.

## Affected

- `archer_ax53_v1.0 <= 1.3.1 Build 20241120`
- `archer_be3600_v1 < (KR)_1.2.2 Build 20260903`
- `archer_be3600_v1.2 < (KR)_1.2.2 Build 20260903`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.