CVE-2026-0620

N/A

Descricao

When configured as L2TP/IPSec VPN server, Archer AXE75 V1 may accept connections using L2TP without IPSec protection, even when IPSec is enabled. This allows VPN sessions without encryption, exposing data in transit and compromising confidentiality.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado2/3/2026

Ultima modificacao2/4/2026

Fontenvd

Avistamentos honeypot0

Fraquezas (CWE)

CWE-693

Referencias

https://www.tp-link.com/en/support/download/archer-axe75/v1/#Firmware(f23511db-6c3e-4e32-a477-6aa17d310630)

https://www.tp-link.com/us/support/download/archer-axe75/v1/#Firmware(f23511db-6c3e-4e32-a477-6aa17d310630)

https://www.tp-link.com/us/support/faq/4942/(f23511db-6c3e-4e32-a477-6aa17d310630)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.