This vulnerability (CVE-2025-6982) affects multiple versions of TP-Link Archer C50 and C20 routers and involves the use of hard-coded credentials (CWE-798). These credentials enable an attacker with adjacent network access and low privileges to decrypt the config.xml files, potentially exposing sensitive configuration information. The CVSS 4.0 base score is 6.9 (medium severity) with an attack vector of adjacent network, low attack complexity, no user interaction required, and high impact on confidentiality. The vulnerability is published but no patch or vendor advisory detailing remediation is currently available.

An attacker with adjacent network access and low privileges can leverage hard-coded credentials to decrypt configuration files on affected TP-Link devices. This could lead to exposure of sensitive device configuration data, potentially aiding further attacks or unauthorized access. However, there is no indication of privilege escalation, integrity, or availability impact beyond confidentiality loss. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected devices to trusted users only and monitor for unusual activity. Avoid exposing device management interfaces to untrusted networks. Follow updates from TP-Link for any forthcoming patches or mitigations.