CVE-2026-102812mediumCWE-321

CVE-2026-102812: fallo de gravedad media en TP-Link Systems Inc. RE305 v3

Hardcoded AES-128 Key and Fixed IV in Configuration Backup Encryption in TP-Link RE305 and Archer C7

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear RE305+ Monitorear Archer C7

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.9epss 0.1%
A hard-coded cryptographic key vulnerability exists in the user-configuration backup mechanism of TP-Link RE305 V3 and Archer C7 V5. A fixed AES-128 key and initialization vector are embedded in the firmware configuration-management component. An attacker who obtains an affected configuration backup file may extract the cryptographic material from the firmware and use it to decrypt the backup.  Successful exploitation may disclose sensitive configuration information contained in a backup file, including administrator passwords and Wi-Fi credentials.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Productos afectados
TP-Link Systems Inc. · Archer C7 v5TP-Link Systems Inc. · RE305 v3
CVEs relacionadas — TP-Link Systems Inc. RE305 v3

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-102815MEDIUMCommand Injection in tmpServer Allows Local Privilege Escalation in TP-Link RE305EPSS 0.6%CVE-2026-102814HIGHImproper Authentication in TP-Link TDDP v2 Allows Root Command Execution in TP-Link RE305EPSS 0.4%CVE-2026-18330MEDIUMHardcoded Shared RSA-1024 Private Key in Web Login in TP-Link RE305 and Archer C7EPSS 0.3%CVE-2026-102813MEDIUMAdministrator Password Reset Through the Verification-Code Interface in TP-Link RE305EPSS 0.2%CVE-2026-102816MEDIUMUnauthenticated Wireless Regulatory Region Configuration in TP-Link RE305EPSS 0.2%