CVE-2020-35575

Published: Dec 26, 2020Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

A password-disclosure issue in the web interface on certain TP-Link devices allows a remote attacker to get full administrative access to the web panel. This affects WA901ND devices before 3.16.9(201211) beta, and Archer C5, Archer C7, MR3420, MR6400, WA701ND, WA801ND, WDR3500, WDR3600, WE843N, WR1043ND, WR1045ND, WR740N, WR741ND, WR749N, WR802N, WR840N, WR841HP, WR841N, WR842N, WR842ND, WR845N, WR940N, WR941HP, WR945N, WR949N, and WRD4300 devices.

Affected (27)

Products: Tp Link: Wa901nd Firmware, Archer C5 Firmware, Archer C7 Firmware, Mr3420 Firmware, Mr6400 Firmware, Wa701nd Firmware, Wa801nd Firmware, Wdr3500 Firmware, Wdr3600 Firmware, We843n Firmware, Wr1043nd Firmware, Wr1045nd Firmware, Wr740n Firmware, Wr741nd Firmware, Wr749n Firmware, Wr802n Firmware, Wr840n Firmware, Wr841hp Firmware, Wr841n Firmware, Wr842n Firmware, Wr842nd Firmware, Wr845n Firmware, Wr940n Firmware, Wr941hp Firmware, Wr945n Firmware, Wr949n Firmware, Wrd4300 Firmware

27 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Wa901nd Firmware	Before 3.16.9\(201211\)_beta

Running on/with	Platform Versions
Tp Link Wa901nd	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Archer C5 Firmware	All versions

Running on/with	Platform Versions
Tp Link Archer C5	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Archer C7 Firmware	All versions

Running on/with	Platform Versions
Tp Link Archer C7	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Mr3420 Firmware	All versions

Running on/with	Platform Versions
Tp Link Mr3420	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Mr6400 Firmware	All versions

Running on/with	Platform Versions
Tp Link Mr6400	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Wa701nd Firmware	All versions

Running on/with	Platform Versions
Tp Link Wa701nd	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Wa801nd Firmware	All versions

Running on/with	Platform Versions
Tp Link Wa801nd	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Wdr3500 Firmware	All versions

Running on/with	Platform Versions
Tp Link Wdr3500	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Wdr3600 Firmware	All versions

Running on/with	Platform Versions
Tp Link Wdr3600	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link We843n Firmware	All versions

Running on/with	Platform Versions
Tp Link We843n	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Wr1043nd Firmware	All versions

Running on/with	Platform Versions
Tp Link Wr1043nd	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Wr1045nd Firmware	All versions

Running on/with	Platform Versions
Tp Link Wr1045nd	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Wr740n Firmware	All versions

Running on/with	Platform Versions
Tp Link Wr740n	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Wr741nd Firmware	All versions

Running on/with	Platform Versions
Tp Link Wr741nd	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Wr749n Firmware	All versions

Running on/with	Platform Versions
Tp Link Wr749n	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Wr802n Firmware	All versions

Running on/with	Platform Versions
Tp Link Wr802n	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Wr840n Firmware	All versions

Running on/with	Platform Versions
Tp Link Wr840n	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Wr841hp Firmware	All versions

Running on/with	Platform Versions
Tp Link Wr841hp	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Wr841n Firmware	All versions

Running on/with	Platform Versions
Tp Link Wr841n	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Wr842n Firmware	All versions

Running on/with	Platform Versions
Tp Link Wr842n	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Wr842nd Firmware	All versions

Running on/with	Platform Versions
Tp Link Wr842nd	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Wr845n Firmware	All versions

Running on/with	Platform Versions
Tp Link Wr845n	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Wr940n Firmware	All versions

Running on/with	Platform Versions
Tp Link Wr940n	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Wr941hp Firmware	All versions

Running on/with	Platform Versions
Tp Link Wr941hp	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Wr945n Firmware	All versions

Running on/with	Platform Versions
Tp Link Wr945n	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Wr949n Firmware	All versions

Running on/with	Platform Versions
Tp Link Wr949n	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Wrd4300 Firmware	All versions

Running on/with	Platform Versions
Tp Link Wrd4300	All versions

References (8)

http://packetstormsecurity.com/files/163274/TP-Link-TL-WR841N-Command-Injection.html

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

https://pastebin.com/F8AuUdck

Source: cve@mitre.org

Third Party Advisory

https://static.tp-link.com/2020/202012/20201214/wa901ndv5_eu_3_16_9_up_boot%28201211%29.zip

Source: cve@mitre.org

https://www.tp-link.com/us/security

Source: cve@mitre.org

Vendor Advisory

http://packetstormsecurity.com/files/163274/TP-Link-TL-WR841N-Command-Injection.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryVDB Entry

https://pastebin.com/F8AuUdck

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://static.tp-link.com/2020/202012/20201214/wa901ndv5_eu_3_16_9_up_boot%28201211%29.zip

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.tp-link.com/us/security

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.