CVE-2025-14175 MEDIUM

CVE-2025-14175: Weak Algorithm Support in SSH Server on TL-WR820N

Vendor Tp-Link Systems Inc.
Product TL-WR820N v2.8
Weakness CWE-327 · Broken crypto
Published December 29, 2025
Last update January 2, 2026

CVSS base score

6.0/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A vulnerability in the SSH server of TP-Link TL-WR820N v2.80 allows the use of a weak cryptographic algorithm, enabling an adjacent attacker to intercept and decrypt SSH traffic. Exploitation may expose sensitive information and compromise confidentiality.

Key dates

02Disclosure timeline

December 29, 2025 CVE published
January 2, 2026 Record updated