Vulnerability in TP-Link Systems Inc. Archer C20 V5

CVE-2025-6982

Use of Hard-coded Credentials in TP-Link Archer C50 V3( <= 180703)/V4( <= 250117 )/V5( <= 200407 ), and C20 V5 (<US_V5_260419 or <EU_V5_260317) allows attackers to decrypt the config.xml files.

EPSS: 0.003 (16.8th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References