CVE-2015-3035

2015-04-2201:59:00

CWE-22

[email protected]

web.nvd.nist.gov

837

In Wild

cve-2015-3035

directory traversal

vulnerability

tp-link

archer c5

archer c7

archer c8

archer c9

tl-wdr3500

tl-wdr3600

tl-wdr4300

tl-wr740n

tl-wr741nd

tl-wr841n

tl-wr841nd

firmware

6.7 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.59 Medium

EPSS

Percentile

97.7%

JSON

Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (1.0), TL-WDR3600 (1.0), and TL-WDR4300 (1.0) with firmware before 150302, TL-WR740N (5.0) and TL-WR741ND (5.0) with firmware before 150312, and TL-WR841N (9.0), TL-WR841N (10.0), TL-WR841ND (9.0), and TL-WR841ND (10.0) with firmware before 150310 allows remote attackers to read arbitrary files via a … (dot dot) in the PATH_INFO to login/.

CPENameOperatorVersion
tp-link:tl-wr841n_\(9.0\)_firmwaretp-link tl-wr841n \(9.0\) firmwareeq*
tp-link:tl-wr740n_\(5.0\)_firmwaretp-link tl-wr740n \(5.0\) firmwarele141217
tp-link:archer_c5_\(1.2\)_firmwaretp-link archer c5 \(1.2\) firmwarele141126
tp-link:tl-wr841n_\(10.0\)_firmwaretp-link tl-wr841n \(10.0\) firmwareeq*
tp-link:tl-wr741nd_\(5.0\)_firmwaretp-link tl-wr741nd \(5.0\) firmwarele141217
tp-link:tl-wr741nd_\(5.0\)tp-link tl-wr741nd \(5.0\)eq*
tp-link:tl-wdr3600_\(1.0\)_firmwaretp-link tl-wdr3600 \(1.0\) firmwarele141022
tp-link:archer_c7_\(2.0\)_firmwaretp-link archer c7 \(2.0\) firmwarele141110
tp-link:tl-wr841nd_\(10.0\)_firmwaretp-link tl-wr841nd \(10.0\) firmwareeq150104
tp-link:archer_c9_\(1.0\)_firmwaretp-link archer c9 \(1.0\) firmwarele150122

CPE	Name	Operator	Version
tp-link:tl-wr841n_\(9.0\)_firmware	tp-link tl-wr841n \(9.0\) firmware	eq	*
tp-link:tl-wr740n_\(5.0\)_firmware	tp-link tl-wr740n \(5.0\) firmware	le	141217
tp-link:archer_c5_\(1.2\)_firmware	tp-link archer c5 \(1.2\) firmware	le	141126
tp-link:tl-wr841n_\(10.0\)_firmware	tp-link tl-wr841n \(10.0\) firmware	eq	*
tp-link:tl-wr741nd_\(5.0\)_firmware	tp-link tl-wr741nd \(5.0\) firmware	le	141217
tp-link:tl-wr741nd_\(5.0\)	tp-link tl-wr741nd \(5.0\)	eq	*
tp-link:tl-wdr3600_\(1.0\)_firmware	tp-link tl-wdr3600 \(1.0\) firmware	le	141022
tp-link:archer_c7_\(2.0\)_firmware	tp-link archer c7 \(2.0\) firmware	le	141110
tp-link:tl-wr841nd_\(10.0\)_firmware	tp-link tl-wr841nd \(10.0\) firmware	eq	150104
tp-link:archer_c9_\(1.0\)_firmware	tp-link archer c9 \(1.0\) firmware	le	150122