CVE-2015-3035

KEVTP-Link Multiple Archer Devices Directory Traversal Vulnerability

Description

Directory traversal vulnerability in multiple TP-Link Archer devices allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.

Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (1.0), TL-WDR3600 (1.0), and TL-WDR4300 (1.0) with firmware before 150302, TL-WR740N (5.0) and TL-WR741ND (5.0) with firmware before 150312, and TL-WR841N (9.0), TL-WR841N (10.0), TL-WR841ND (9.0), and TL-WR841ND (10.0) with firmware before 150310 allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.

CVSS 3.1 vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

PublishedApr 22, 2015

Last modifiedJun 17, 2026

Added to KEVMar 25, 2022

Remediation dueApr 15, 2022

References

packetstormsecurity.com/files/131378/TP-LINK-Local-File-Disclosure.htmlExploitThird Party Advisory
seclists.org/fulldisclosure/2015/Apr/26ExploitMailing List
securityfocus.com/archive/1/535240/100/0/threadedBroken LinkThird Party Advisory
securityfocus.com/bid/74050Broken LinkThird Party Advisory
tp-link.com/en/download/Archer-C5_V1.20.htmlProduct
tp-link.com/en/download/Archer-C7_V2.htmlProduct
tp-link.com/en/download/Archer-C8_V1.htmlProduct
tp-link.com/en/download/Archer-C9_V1.htmlProduct
tp-link.com/en/download/TL-WDR3500_V1.htmlProduct
tp-link.com/en/download/TL-WDR3600_V1.htmlProduct
tp-link.com/en/download/TL-WDR4300_V1.htmlProduct
tp-link.com/en/download/TL-WR740N_V5.htmlProduct

0 recent articles mention this CVE

Risk assessment · High

Actively exploited. Patch immediately.

Exploitation: Confirmed in the wild (CISA KEV)
Federal remediation deadline: Overdue by 1656 days
CVSS: 7.5 HIGH
EPSS (30-day exploit probability): 83.9% · top 1% of all CVEs
Weakness: CWE-22
Attack vector: Network, remotely reachable
Preconditions: No privileges and no user interaction

Recommended actions

1.Apply updates per vendor instructions.
2.Treat as emergency change: patch or isolate internet-facing instances first.
3.Review exposure: confirm which instances are reachable from the internet and restrict access until patched.
4.Hunt for compromise: review logs for the disclosure window, not just from the patch date.

Assessment is derived automatically from the live signals above; verify against your own asset inventory.