TP-Link · Multiple Archer Devices
CVE-2015-3035
TP-Link Multiple Archer Devices Directory Traversal Vulnerability
What it is
Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (1.0), TL-WDR3600 (1.0), and TL-WDR4300 (1.0) with firmware before 150302, TL-WR740N (5.0) and TL-WR741ND (5.0) with firmware before 150312, and TL-WR841N (9.0), TL-WR841N (10.0), TL-WR841ND (9.0), and TL-WR841ND (10.0) with firmware before 150310 allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.
CISA: Directory traversal vulnerability in multiple TP-Link Archer devices allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.
What to do
Apply updates per vendor instructions.
Deadline for US federal agencies: April 15, 2022
- Added to the CISA list
- March 25, 2022
- Published
- April 17, 2015
- Severity
- High 7.5 CVSS 3.1
- Chance of attacks in the next 30 days (EPSS)
- 84% in the top 0.3% of all known vulnerabilities
- Weakness
- CWE-22
- More details
- NVD · CVE.org · CISA
All references (16)
- http://www.tp-link.com/en/download/Archer-C9_V1.html#Firmware
- http://www.tp-link.com/en/download/Archer-C7_V2.html#Firmware
- http://www.tp-link.com/en/download/TL-WR740N_V5.html#Firmware
- http://www.tp-link.com/en/download/Archer-C5_V1.20.html#Firmware
- http://packetstormsecurity.com/files/131378/TP-LINK-Local-File-Disclosure.html
- http://www.tp-link.com/en/download/TL-WR841N_V9.html#Firmware
- http://www.tp-link.com/en/download/TL-WR841ND_V9.html#Firmware
- http://seclists.org/fulldisclosure/2015/Apr/26
- http://www.tp-link.com/en/download/TL-WDR3600_V1.html#Firmware
- http://www.tp-link.com/en/download/TL-WDR3500_V1.html#Firmware
- http://www.securityfocus.com/bid/74050
- https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20150410-0_TP-Link_Unauthenticated_loc…
- http://www.tp-link.com/en/download/TL-WR741ND_V5.html#Firmware
- http://www.tp-link.com/en/download/Archer-C8_V1.html#Firmware
- http://www.tp-link.com/en/download/TL-WDR4300_V1.html#Firmware
- http://www.securityfocus.com/archive/1/535240/100/0/threaded
More exploited flaws from TP-Link
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Sep 3, 2025 | Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection | Multiple Routers | High 8.6 | 38% |
| Sep 3, 2025 | Authentication Bypass by Spoofing | TL-WR841N | Medium 6.5 | 20% |
| Sep 2, 2025 | Missing Authentication for Critical Function | TL-WA855RE | High 8.8 | 22% |
| Jun 16, 2025 | Command Injection | Multiple Routers | High 8.8 | 42% |
| May 1, 2023 | Archer AX-21 Command Injection | Archer AX21 | High 8.8 | >99.9% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.