# CVE-2025-62501: SSH Hostkey misconfiguration vulnerability in Archer AX53 and Archer BE3600 (tmpserver modules) allows attackers to…

Source: https://junglewise.ai/threats/cve-2025-62501-ssh-hostkey-misconfiguration-vulnerability-in-archer-ax53-and  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-02-03  
License: CC BY 4.0 with a link back

CVE-2025-62501 · Severity: high · CVSS 8.1 · Published 2026-02-03

SSH Hostkey misconfiguration vulnerability in Archer AX53 and Archer BE3600 (tmpserver modules) allows attackers to obtain device credentials through a specially crafted man‑in‑the‑middle (MITM) attack. This could enable unauthorized access if captured credentials are reused.

Technologies: [TP-Link Archer Ax53](https://junglewise.ai/threats/technologies/archer-ax53), [TP-Link Archer Ax53 Firmware](https://junglewise.ai/threats/technologies/archer-ax53-firmware). Vendors: [TP-Link](https://junglewise.ai/threats/vendors/tp-link).

## Quick answers

**Is CVE-2025-62501 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-62501 being exploited in the wild.

**How severe is CVE-2025-62501?** High severity, with a CVSS score of 8.1, published 3 February 2026.

**Which products and versions are affected?** TP-Link Archer Ax53, TP-Link Archer Ax53 Firmware. The advisory does not name versions.

**Is there a fix for CVE-2025-62501?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-62501?** Check whether you run TP-Link Archer Ax53 or TP-Link Archer Ax53 Firmware. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- TP-Link Archer Ax53
- TP-Link Archer Ax53 Firmware

## Related threats

- [TP-Link Archer AX53 OS command injection in dnsmasq](https://junglewise.ai/threats/cve-2026-30818-tp-link-archer-ax53-os-command-injection-in-dnsmasq)
- [TP-Link Archer AX53 arbitrary file read in OpenVPN module](https://junglewise.ai/threats/cve-2026-30817-tp-link-archer-ax53-arbitrary-file-read-in-openvpn-module)
- [TP-Link Archer AX53 arbitrary file read in OpenVPN module](https://junglewise.ai/threats/cve-2026-30816-tp-link-archer-ax53-arbitrary-file-read-in-openvpn-module)
- [TP-Link Archer AX53 OS command injection in OpenVPN module](https://junglewise.ai/threats/cve-2026-30815-tp-link-archer-ax53-os-command-injection-in-openvpn-module)
- [TP-Link Archer AX53 stack overflow in tmpServer](https://junglewise.ai/threats/cve-2026-30814-tp-link-archer-ax53-stack-overflow-in-tmpserver)