CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-3035

Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (1.0), TL-WDR3600 (1.0), and TL-WDR4300 (1.0) with firmware before 150302, TL-WR740N (5.0) and TL-WR741ND (5.0) with firmware before 150312, and TL-WR841N (9.0), TL-WR841N (10.0), TL-WR841ND (9.0), and TL-WR841ND (10.0) with firmware before 150310 allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.931

EPSS Ranking 99.8%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 7.8

Proposed Action

Directory traversal vulnerability in multiple TP-Link Archer devices allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.

Ransomware Campaign

Unknown

References

Products affected by CVE-2015-3035

Tp-Link » Archer C5 » Version: 1.20

cpe:2.3:h:tp-link:archer_c5:1.20
Tp-Link » Archer C7 » Version: 2

cpe:2.3:h:tp-link:archer_c7:2
Tp-Link » Archer C8 » Version: 1

cpe:2.3:h:tp-link:archer_c8:1
Tp-Link » Archer C9 » Version: 1

cpe:2.3:h:tp-link:archer_c9:1
Tp-Link » Tl-Wdr3500 » Version: 1

cpe:2.3:h:tp-link:tl-wdr3500:1
Tp-Link » Tl-Wdr3600 » Version: 1

cpe:2.3:h:tp-link:tl-wdr3600:1
Tp-Link » Tl-Wdr4300 » Version: 1

cpe:2.3:h:tp-link:tl-wdr4300:1
Tp-Link » Tl-Wr740n » Version: 5

cpe:2.3:h:tp-link:tl-wr740n:5
Tp-Link » Tl-Wr741nd » Version: 5

cpe:2.3:h:tp-link:tl-wr741nd:5
Tp-Link » Tl-Wr841n » Version: 10

cpe:2.3:h:tp-link:tl-wr841n:10
Tp-Link » Tl-Wr841n » Version: 9

cpe:2.3:h:tp-link:tl-wr841n:9
Tp-Link » Tl-Wr841nd » Version: 10

cpe:2.3:h:tp-link:tl-wr841nd:10
Tp-Link » Tl-Wr841nd » Version: 9

cpe:2.3:h:tp-link:tl-wr841nd:9
Tp-Link » Archer C5 Firmware » Version: N/A

cpe:2.3:o:tp-link:archer_c5_firmware:-
Tp-Link » Archer C5 Firmware » Version: 2_160201_us

cpe:2.3:o:tp-link:archer_c5_firmware:2_160201_us
Tp-Link » Archer C7 Firmware » Version: N/A

cpe:2.3:o:tp-link:archer_c7_firmware:-
Tp-Link » Archer C8 Firmware » Version: Any

cpe:2.3:o:tp-link:archer_c8_firmware:*
Tp-Link » Archer C9 Firmware » Version: Any

cpe:2.3:o:tp-link:archer_c9_firmware:*
Tp-Link » Tl-Wdr3500 Firmware » Version: 1.0

cpe:2.3:o:tp-link:tl-wdr3500_firmware:1.0
Tp-Link » Tl-Wdr3500 Firmware » Version: 1.2

cpe:2.3:o:tp-link:tl-wdr3500_firmware:1.2
Tp-Link » Tl-Wdr3500 Firmware » Version: 1.3

cpe:2.3:o:tp-link:tl-wdr3500_firmware:1.3
Tp-Link » Tl-Wdr3600 Firmware » Version: 1.1

cpe:2.3:o:tp-link:tl-wdr3600_firmware:1.1
Tp-Link » Tl-Wdr3600 Firmware » Version: 1.2

cpe:2.3:o:tp-link:tl-wdr3600_firmware:1.2
Tp-Link » Tl-Wdr3600 Firmware » Version: 1.3

cpe:2.3:o:tp-link:tl-wdr3600_firmware:1.3
Tp-Link » Tl-Wdr3600 Firmware » Version: 1.4

cpe:2.3:o:tp-link:tl-wdr3600_firmware:1.4
Tp-Link » Tl-Wdr3600 Firmware » Version: 1.5

cpe:2.3:o:tp-link:tl-wdr3600_firmware:1.5
Tp-Link » Tl-Wdr4300 Firmware » Version: N/A

cpe:2.3:o:tp-link:tl-wdr4300_firmware:-
Tp-Link » Tl-Wdr4300 Firmware » Version: 1.0

cpe:2.3:o:tp-link:tl-wdr4300_firmware:1.0
Tp-Link » Tl-Wdr4300 Firmware » Version: 1.1

cpe:2.3:o:tp-link:tl-wdr4300_firmware:1.1
Tp-Link » Tl-Wdr4300 Firmware » Version: 1.2

cpe:2.3:o:tp-link:tl-wdr4300_firmware:1.2
Tp-Link » Tl-Wdr4300 Firmware » Version: 1.3

cpe:2.3:o:tp-link:tl-wdr4300_firmware:1.3
Tp-Link » Tl-Wdr4300 Firmware » Version: 1.4

cpe:2.3:o:tp-link:tl-wdr4300_firmware:1.4
Tp-Link » Tl-Wdr4300 Firmware » Version: 1.5

cpe:2.3:o:tp-link:tl-wdr4300_firmware:1.5
Tp-Link » Tl-Wdr4300 Firmware » Version: 1.6

cpe:2.3:o:tp-link:tl-wdr4300_firmware:1.6
Tp-Link » Tl-Wdr4300 Firmware » Version: 1.7

cpe:2.3:o:tp-link:tl-wdr4300_firmware:1.7
Tp-Link » Tl-Wdr4300 Firmware » Version: 3.13.31

cpe:2.3:o:tp-link:tl-wdr4300_firmware:3.13.31
Tp-Link » Tl-Wr740n Firmware » Version: N/A

cpe:2.3:o:tp-link:tl-wr740n_firmware:-
Tp-Link » Tl-Wr741nd Firmware » Version: 3.11.7

cpe:2.3:o:tp-link:tl-wr741nd_firmware:3.11.7
Tp-Link » Tl-Wr841n Firmware » Version: N/A

cpe:2.3:o:tp-link:tl-wr841n_firmware:-
Tp-Link » Tl-Wr841n Firmware » Version: 0.9.1_4.16

cpe:2.3:o:tp-link:tl-wr841n_firmware:0.9.1_4.16
Tp-Link » Tl-Wr841n Firmware » Version: 0.9.1_4.18

cpe:2.3:o:tp-link:tl-wr841n_firmware:0.9.1_4.18
Tp-Link » Tl-Wr841n Firmware » Version: 3.13.9

cpe:2.3:o:tp-link:tl-wr841n_firmware:3.13.9
Tp-Link » Tl-Wr841n Firmware » Version: 3.16.9

cpe:2.3:o:tp-link:tl-wr841n_firmware:3.16.9
Tp-Link » Tl-Wr841n Firmware » Version: 4.17.16_build_120201_rel.54750n

cpe:2.3:o:tp-link:tl-wr841n_firmware:4.17.16_build_120201_rel.54750n
Tp-Link » Tl-Wr841nd Firmware » Version: N/A

cpe:2.3:o:tp-link:tl-wr841nd_firmware:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-3035

Products

Pricing

Contact Us