CVE-2025-14175— Weak Algorithm Support in SSH Server on TL-WR820N
Quick assessment
Affected
TP-Link Systems Inc. TL-WR820N v2.8
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
TP-Link TL-WR820N是中国普联（TP-Link）公司的一款无线路由器。 TP-Link TL-WR820N v2.80版本存在安全漏洞，该漏洞源于SSH服务器使用弱加密算法，可能导致相邻攻击者拦截和解密SSH流量，泄露敏感信息。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-14175
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Weak Algorithm Support in SSH Server on TL-WR820N
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the SSH server of TP-Link TL-WR820N v2.80 allows the use of a weak cryptographic algorithm, enabling an adjacent attacker to intercept and decrypt SSH traffic. Exploitation may expose sensitive information and compromise confidentiality.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
使用已被攻破或存在风险的密码学算法
Source: CVE Program / CVE List V5
Vulnerability Title
TP-Link TL-WR820N 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
TP-Link TL-WR820N是中国普联（TP-Link）公司的一款无线路由器。 TP-Link TL-WR820N v2.80版本存在安全漏洞，该漏洞源于SSH服务器使用弱加密算法，可能导致相邻攻击者拦截和解密SSH流量，泄露敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| TP-Link Systems Inc. | TL-WR820N v2.8 | 0 ~ 1.15.0 Build 250813 | - |
|
II. Public POCs for CVE-2025-14175
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | Responsible disclosure write-up for CVE-2025-14175 involving weak cryptographic algorithm support in the SSH server of TP-Link TL-WR820N. | https://github.com/CyberVinner/TP-Link-TL-WR820N-CVE-2025-14175 | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-14175
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same vendor: TP-Link Systems Inc.
-
CVE-2026-102370
Physical UART Access Leading to an Unauthenticated Root Shel -
CVE-2026-84682
TDDPv2 setProductVer Command Injection in Archer AX90 -
CVE-2026-8618
Pre-Authentication Stack-based Buffer Overflow Remote Code E -
CVE-2026-102369
Unauthenticated Remote Code Execution via MacTool Command In -
CVE-2026-78578
Unauthenticated do Method Onboarding Connect Allows Wi‑Fi Re
Same weakness: CWE-327
-
CVE-2026-102824
Russh: Missing X25519 zero-point validation in hybrid ML-KEM -
CVE-2026-18104
IBM Db2 Mirror for i is vulnerable to obtain sensitive infor -
CVE-2026-18153
IBM Financial Transaction Manager (FTM) is Impacted by Multi -
CVE-2025-36084
Multiple Vulnerabilities in IBM Concert Software -
CVE-2026-54147
http4k: `DigestAuthProvider.verify` ignored configured algor
V. Comments for CVE-2025-14175
Anonymous User
2026-01-15 06:09:01Zaproxy alias impedit expedita quisquam pariatur exercitationem. Nemo rerum eveniet dolores rem quia dignissimos.