The TP-Link Archer C7 v5 and v5.8 routers have an inadequate encryption strength vulnerability in their uhttpd modules. The web interface encrypts the admin password client-side using RSA-1024 during login. An adjacent attacker who can intercept network traffic could attempt to brute-force or factor the 1024-bit RSA key to recover the administrator password. This could lead to unauthorized access and compromise of the device configuration. The vulnerability affects builds through 20220715. The CVSS score is 8.8, indicating high severity.