CVE-2020-35575

🗓️ 26 Dec 2020 02:02:45Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 188 Views🌐 WEB

CVE-2020-35575 password-disclosure issue in TP-Link web interfac

Reporter	Title	Published	Views	Family All 10
0day.today	TP-Link TL-WR841N - Command Injection Exploit	25 Jun 202100:00	–	zdt
Circl	CVE-2020-35575	26 Dec 202007:26	–	circl
CNNVD	Multiple Tp-Link Router Products Information Disclosure Vulnerability	25 Dec 202000:00	–	cnnvd
Check Point Advisories	TP-Link Multiple Products Remote Code Execution (CVE-2020-35575)	29 Sep 202100:00	–	checkpoint_advisories
Cvelist	CVE-2020-35575	26 Dec 202002:02	–	cvelist
NVD	CVE-2020-35575	26 Dec 202002:15	–	nvd
OSV	CVE-2020-35575	26 Dec 202002:15	–	osv
Packet Storm	TP-Link TL-WR841N Command Injection	24 Jun 202100:00	–	packetstorm
Prion	Cross site scripting	26 Dec 202002:15	–	prion
RedhatCVE	CVE-2020-35575	22 May 202517:11	–	redhatcve

NVD

Node

AND

tp-link wa901nd_firmwareRange<3.16.9(201211)_beta

tp-link wa901ndMatch-

Node

AND

tp-link archer_c5_firmwareMatch-

tp-link archer_c5Match-

Node

AND

tp-link archer_c7_firmwareMatch-

tp-link archer_c7Match-

Node

AND

tp-link mr3420_firmwareMatch-

tp-link mr3420Match-

Node

AND

tp-link mr6400_firmwareMatch-

tp-link mr6400Match-

Node

AND

tp-link wa701nd_firmwareMatch-

tp-link wa701ndMatch-

Node

AND

tp-link wa801nd_firmwareMatch-

tp-link wa801ndMatch-

Node

AND

tp-link wdr3500_firmwareMatch-

tp-link wdr3500Match-

Node

AND

tp-link wdr3600_firmwareMatch-

tp-link wdr3600Match-

Node

AND

tp-link we843n_firmwareMatch-

tp-link we843nMatch-

Node

AND

tp-link wr1043nd_firmwareMatch-

tp-link wr1043ndMatch-

Node

AND

tp-link wr1045nd_firmwareMatch-

tp-link wr1045ndMatch-

Node

AND

tp-link wr740n_firmwareMatch-

tp-link wr740nMatch-

Node

AND

tp-link wr741nd_firmwareMatch-

tp-link wr741ndMatch-

Node

AND

tp-link wr749n_firmwareMatch-

tp-link wr749nMatch-

Node

AND

tp-link wr802n_firmwareMatch-

tp-link wr802nMatch-

Node

AND

tp-link wr840n_firmwareMatch-

tp-link wr840nMatch-

Node

AND

tp-link wr841hp_firmwareMatch-

tp-link wr841hpMatch-

Node

AND

tp-link wr841n_firmwareMatch-

tp-link wr841nMatch-

Node

AND

tp-link wr842n_firmwareMatch-

tp-link wr842nMatch-

Node

AND

tp-link wr842nd_firmwareMatch-

tp-link wr842ndMatch-

Node

AND

tp-link wr845n_firmwareMatch-

tp-link wr845nMatch-

Node

AND

tp-link wr940n_firmwareMatch-

tp-link wr940nMatch-

Node

AND

tp-link wr941hp_firmwareMatch-

tp-link wr941hpMatch-

Node

AND

tp-link wr945n_firmwareMatch-

tp-link wr945nMatch-

Node

AND

tp-link wr949n_firmwareMatch-

tp-link wr949nMatch-

Node

AND

tp-link wrd4300_firmwareMatch-

tp-link wrd4300Match-

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/163274/TP-Link-TL-WR841N-Command-Injection.html
pastebin	www.pastebin.com/F8AuUdck
tp-link	www.tp-link.com/us/security
static	www.static.tp-link.com/2020/202012/20201214/wa901ndv5_eu_3_16_9_up_boot%28201211%29.zip

Parameter	Position	Path	Description	CWE
diagnosticsState	request body	192.168.0.1/cgi?2	TP-Link router command injection via TRACEROUTE_DIAG payload in POST to /cgi?2.	CWE-200
X_TP_HopSeq	request body	192.168.0.1/cgi?2	TP-Link router command injection via TRACEROUTE_DIAG payload in POST to /cgi?2.	CWE-200
host	request body	192.168.0.1/cgi?2	TP-Link router command injection via TRACEROUTE_DIAG payload in POST to /cgi?2.	CWE-200
dataBlockSize	request body	192.168.0.1/cgi?2	TP-Link router command injection via TRACEROUTE_DIAG payload in POST to /cgi?2.	CWE-200
X_TP_ConnName	request body	192.168.0.1/cgi?2	TP-Link router command injection via TRACEROUTE_DIAG payload in POST to /cgi?2.	CWE-200
timeOut	request body	192.168.0.1/cgi?2	TP-Link router command injection via TRACEROUTE_DIAG payload in POST to /cgi?2.	CWE-200
maxHopCount	request body	192.168.0.1/cgi?2	TP-Link router command injection via TRACEROUTE_DIAG payload in POST to /cgi?2.	CWE-200
numberOfTries	request body	192.168.0.1/cgi?2	TP-Link router command injection via TRACEROUTE_DIAG payload in POST to /cgi?2.	CWE-200
data2	request body	192.168.0.1/cgi?7	TP-Link router command execution via crafted traceroute operation in POST to /cgi?7.	CWE-200
diagnosticsState	request body	192.168.0.1/cgi?7	TP-Link router command execution via crafted traceroute operation in POST to /cgi?7.	CWE-200

17 Jun 2026 03:13Current

9.3High risk

Vulners AI Score9.3

CVSS 27.5

CVSS 3.19.8

EPSS0.07643