CVE-2015-3035 Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (1...
HighCVSS 7.5
EPSS 83.9%
CISA KEV
added 2022-03-25 · due 2022-04-15
Exploited in the wild
Framework module
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (1.0), TL-WDR3600 (1.0), and TL-WDR4300 (1.0) with firmware before 150302, TL-WR740N (5.0) and TL-WR741ND (5.0) with firmware before 150312, and TL-WR841N (9.0), TL-WR841N (10.0), TL-WR841ND (9.0), and TL-WR841ND (10.0) with firmware before 150310 allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.
CISA Known Exploited Vulnerability
- Date added
- 2022-03-25
- Due date (FCEB)
- 2022-04-15
- Ransomware use
- Unknown
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tp-link tl-wr741nd firmware | < 150312 | 150312 |
| tp-link tl-wr841n firmware | < 150310 | 150310 |
| tp-link tl-wr740n firmware | < 150312 | 150312 |
| tp-link archer c5 firmware | < 150317 | 150317 |
| tp-link tl-wdr3600 firmware | < 150302 | 150302 |
| tp-link archer c7 firmware | < 150304 | 150304 |
| tp-link tl-wr841nd firmware | < 150310 | 150310 |
| tp-link archer c9 firmware | < 150302 | 150302 |
| tp-link archer c8 firmware | < 150316 | 150316 |
| tp-link tl-wdr4300 firmware | < 150302 | 150302 |
| tp-link tl-wdr3500 firmware | < 150302 | 150302 |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20150410 SEC Consult SA-20150410-0 :: Unauthenticated Local File Disclosure in multiple TP-LINK products (CVE-2015-3035) exploit mailing-list third-party-advisory
- 20150410 SEC Consult SA-20150410-0 :: Unauthenticated Local File Disclosure in multiple TP-LINK products (CVE-2015-3035) broken-link mailing-list third-party-advisory vdb-entry
- 74050 broken-link third-party-advisory vdb-entry
- www.tp-link.com product
- www.tp-link.com product
- www.tp-link.com product
- www.tp-link.com product
- www.tp-link.com product
- www.tp-link.com product
- www.tp-link.com product
- www.tp-link.com product
- www.tp-link.com product
- www.tp-link.com product
- www.tp-link.com product
- www.sec-consult.com exploit not-applicable
- www.cisa.gov government-resource us-government-resource