CVE-2015-3035

Published: Apr 22, 2015Modified: Apr 21, 2026CISA KEV

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (1.0), TL-WDR3600 (1.0), and TL-WDR4300 (1.0) with firmware before 150302, TL-WR740N (5.0) and TL-WR741ND (5.0) with firmware before 150312, and TL-WR841N (9.0), TL-WR841N (10.0), TL-WR841ND (9.0), and TL-WR841ND (10.0) with firmware before 150310 allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.

Affected (11)

Products: Tp Link: Tl Wr741nd Firmware, Tl Wr740n Firmware, Archer C5 Firmware, Tl Wr841n Firmware, Tl Wdr3600 Firmware, Archer C7 Firmware, Archer C9 Firmware, Tl Wr841nd Firmware, Archer C8 Firmware, Tl Wdr4300 Firmware, Tl Wdr3500 Firmware

11 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Tl Wr741nd Firmware	Before 150312

Running on/with	Platform Versions
Tp Link Tl Wr741nd	Version 5

Configuration B

1 platform

Running on/with	Platform Versions
Tp Link Tl Wr841n	Version 9

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Tl Wr740n Firmware	Before 150312

Running on/with	Platform Versions
Tp Link Tl Wr740n	Version 5

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Archer C5 Firmware	Before 150317

Running on/with	Platform Versions
Tp Link Archer C5	Version 1.20

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Tl Wr841n Firmware	Before 150310

Running on/with	Platform Versions
Tp Link Tl Wr841n	Version 10

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Tl Wdr3600 Firmware	Before 150302

Running on/with	Platform Versions
Tp Link Tl Wdr3600	Version 1

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Archer C7 Firmware	Before 150304

Running on/with	Platform Versions
Tp Link Archer C7	Version 2

Configuration H

1 platform

Running on/with	Platform Versions
Tp Link Tl Wr841nd	Version 10

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Archer C9 Firmware	Before 150302

Running on/with	Platform Versions
Tp Link Archer C9	Version 1

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Tl Wr841nd Firmware	Before 150310

Running on/with	Platform Versions
Tp Link Tl Wr841nd	Version 9

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Archer C8 Firmware	Before 150316

Running on/with	Platform Versions
Tp Link Archer C8	Version 1

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Tl Wdr4300 Firmware	Before 150302

Running on/with	Platform Versions
Tp Link Tl Wdr4300	Version 1

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Tl Wdr3500 Firmware	Before 150302

Running on/with	Platform Versions
Tp Link Tl Wdr3500	Version 1

Related CWEs

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (33)

http://packetstormsecurity.com/files/131378/TP-LINK-Local-File-Disclosure.html

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

http://seclists.org/fulldisclosure/2015/Apr/26

Source: cve@mitre.org

ExploitMailing ListThird Party Advisory

http://www.securityfocus.com/archive/1/535240/100/0/threaded

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/74050

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.tp-link.com/en/download/Archer-C5_V1.20.html#Firmware

Source: cve@mitre.org

Product

http://www.tp-link.com/en/download/Archer-C7_V2.html#Firmware

Source: cve@mitre.org

Product

http://www.tp-link.com/en/download/Archer-C8_V1.html#Firmware

Source: cve@mitre.org

Product

http://www.tp-link.com/en/download/Archer-C9_V1.html#Firmware

Source: cve@mitre.org

Product

http://www.tp-link.com/en/download/TL-WDR3500_V1.html#Firmware

Source: cve@mitre.org

Product

http://www.tp-link.com/en/download/TL-WDR3600_V1.html#Firmware

Source: cve@mitre.org

Product

http://www.tp-link.com/en/download/TL-WDR4300_V1.html#Firmware

Source: cve@mitre.org

Product

http://www.tp-link.com/en/download/TL-WR740N_V5.html#Firmware

Source: cve@mitre.org

Product

http://www.tp-link.com/en/download/TL-WR741ND_V5.html#Firmware

Source: cve@mitre.org

Product

http://www.tp-link.com/en/download/TL-WR841ND_V9.html#Firmware

Source: cve@mitre.org

Product

http://www.tp-link.com/en/download/TL-WR841N_V9.html#Firmware

Source: cve@mitre.org

Product

https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20150410-0_TP-Link_Unauthenticated_local_file_disclosure_vulnerability_v10.txt

Source: cve@mitre.org

ExploitNot Applicable

http://packetstormsecurity.com/files/131378/TP-LINK-Local-File-Disclosure.html