🔐 CVE-2025-14175

Weak Algorithm Support in SSH Server – TP-Link TL-WR820N

---

Overview

This repository documents a security vulnerability identified in the SSH server implementation of the TP-Link TL-WR820N (v2.80) router.

The vulnerability allowed the use of weak cryptographic algorithms, potentially exposing the confidentiality of SSH traffic.
The issue was responsibly disclosed, patched by the vendor, and assigned CVE-2025-14175.

---

Vulnerability Summary

• Product: TP-Link TL-WR820N (v2.80)
• CVE ID: CVE-2025-14175
• CWE: CWE-327 – Use of a Broken or Risky Cryptographic Algorithm
• CVSS v4.0: 6.0 (Medium)
• Attack Vector: Adjacent Network
• Impact: Confidentiality compromise
• Status: Fixed in the latest firmware

---

Responsible Disclosure Timeline

---

Affected & Fixed Versions

---

Technical Scope

• SSH service permitted the use of weak cryptographic algorithms
• Vendor-confirmed configuration weakness
• No exploit code or weaponized proof-of-concept disclosed

⚠️ This repository is intended strictly for educational and research purposes.

---

References

• 📄 CVE Record: https://www.cve.org/cverecord?id=CVE-2025-14175
• 🛡️ TP-Link Security Advisory: https://www.tp-link.com/us/support/faq/4861/
• 📦 Firmware Downloads: https://www.tp-link.com/in/support/download/tl-wr820n/

---

Researcher

Vishwa V
Cybersecurity Enthusiast | Student SRM Institute of Science and Technology

---

⭐ If you find this research useful, consider giving the repository a star.