This vulnerability involves the use of RSA-1024 encryption for client-side password encryption in the TP-Link Archer C7 v5 and v5.8 web interface login process. RSA-1024 is considered cryptographically weak by modern standards, making it potentially susceptible to brute-force or factorization attacks by an adjacent attacker who can intercept network traffic. Successful exploitation would allow recovery of the administrator password in plaintext, enabling unauthorized access to the router's configuration. The affected versions include Archer C7 devices up to build 20220715. The CVSS 4.0 base score is 5.4, reflecting medium severity with attack vector limited to adjacent network and high attack complexity.

If exploited, this vulnerability allows an attacker with adjacent network access to recover the administrator password by breaking the RSA-1024 encryption protecting the password during login. This leads to unauthorized administrative access and potential full compromise of the router's configuration. There is no indication of direct remote exploitation without network proximity. No known exploits are reported in the wild.

No official patch or remediation level has been provided by TP-Link as of the published date. Users should monitor the vendor's advisory channels for updates or fixes. Until a fix is available, limiting network exposure to trusted devices and avoiding use of vulnerable firmware builds is advisable. Patch status is not yet confirmed—check the vendor advisory for current remediation guidance.