Find a vulnerability

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

4 vulnerabilities found for tl-wr741nd_firmware by tp-link

CVE-2023-50224 (GCVE-0-2023-50224)

Vulnerability from nvd – Published: 2024-05-03 02:14 – Updated: 2026-09-02 17:58

CISA Previdian

Title

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability

Summary

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: active Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-09-03 03:55 UTC

CWE

CWE-290 - Authentication Bypass by Spoofing

Assigner

zdi mitre root Scorecard

References

4 references

URL	Tags
https://www.zerodayinitiative.com/advisories/ZDI-…	x_research-advisory
https://www.tp-link.com/en/support/download/tl-wr…	vendor-advisory
https://www.tp-link.com/us/support/faq/5058/	vendor-advisory
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource

Impacted products

23 products

Vendor	Product	Version
TP-Link	TL-WR841N	Affected: 3.16.9 build 200409 (custom) Affected: V8 (custom) Affected: V9 (custom) Affected: V10 (custom) Affected: V11 (custom) Unaffected: V11_211209 (custom) Affected: V12 (custom) Unaffected: V12_230317 (custom)
TP-Link	TL-WR841ND	Affected: V8 (custom) Affected: V9 (custom) Affected: V10 (custom) Affected: V11 (custom) Unaffected: V11_211209 (custom) Affected: V12 (custom) Unaffected: V12_230317 (custom)
TP-Link	TL-MR6400	Affected: V1 (custom) Affected: V2 (custom)
TP-Link	Archer C5	Affected: V2 (custom)
TP-Link	Archer C7	Affected: V2 (custom) Unaffected: V2_241108 (custom) Affected: V3 (custom)
TP-Link	TL-WDR3600	Affected: V2 (custom)
TP-Link	TL-WDR4300	Affected: V1 (custom)
TP-Link	TL-WDR3500	Affected: V2 (custom)
TP-Link	TL-WR740N	Affected: V4 (custom) Affected: V5 (custom) Affected: V6 (custom) Affected: V7 (custom)
TP-Link	TL-WR741ND	Affected: V4 (custom) Affected: V5 (custom) Affected: V6 (custom)
TP-Link	TL-WR749N	Affected: BR 6.0 (custom) Affected: BR 7.0 (custom)
TP-Link	TL-MR3420	Affected: V2 (custom) Affected: V3 (custom) Affected: V4 (custom)
TP-Link	TL-WR1043ND	Affected: V2 (custom) Affected: V3 (custom) Affected: V4 (custom)
TP-Link	TL-WR1045ND	Affected: RU V2 (custom)
TP-Link	TL-WR840N	Affected: V2 (custom) Affected: V3 (custom)
TP-Link	TL-WR842N	Affected: V2 (custom) Affected: V3 (custom) Affected: V4 (custom)
TP-Link	TL-WR842ND	Affected: V2 (custom) Affected: V3 (custom) Affected: V4 (custom)
TP-Link	TL-WR845N	Affected: V1 (custom) Affected: V2 (custom)
TP-Link	TL-WR941ND	Affected: V5 (custom) Affected: V6 (custom) Unaffected: V6_220610 (custom)
TP-Link	TL-WR945N	Affected: V1 (custom)
TP-Link	TL-WA801ND	Affected: V3 (custom) Affected: V4 (custom)
TP-Link	TL-WA901ND	Affected: V3 (custom) Affected: V4 (custom) Unaffected: V4_201030 (custom) Affected: V5 (custom) Unaffected: V5_201030 (custom)
tp-link	tl-wr841n_firmware	Affected: 0 , < 12.0 (custom) cpe:2.3:o:tp-link:tl-wr841n_firmware:-:::::::*

Date Public

2023-12-19 16:08

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:tp-link:tl-wr841n_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "tl-wr841n_firmware",
            "vendor": "tp-link",
            "versions": [
              {
                "lessThan": "12.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-50224",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-09-03T03:55:22.977218Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2025-09-03",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-50224"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-21T23:05:19.610Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-50224"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2025-09-03T00:00:00.000Z",
            "value": "CVE-2023-50224 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T22:09:49.801Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ZDI-23-1808",
            "tags": [
              "x_research-advisory",
              "x_transferred"
            ],
            "url": "https://www.zerodayinitiative.com/advisories/ZDI-23-1808/"
          },
          {
            "name": "vendor-provided URL",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.tp-link.com/en/support/download/tl-wr841n/v12/#Firmware"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "TL-WR841N",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "3.16.9 build 200409",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V8",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V9",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V10",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V11",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "V11_211209",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V12",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "V12_230317",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-WR841ND",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V8",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V9",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V10",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V11",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "V11_211209",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V12",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "V12_230317",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-MR6400",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V1",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V2",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Archer C5",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V2",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Archer C7",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V2",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "V2_241108",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V3",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-WDR3600",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V2",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-WDR4300",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-WDR3500",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V2",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-WR740N",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V4",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V5",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V6",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V7",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-WR741ND",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V4",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V5",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V6",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-WR749N",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "BR 6.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "BR 7.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-MR3420",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V2",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V4",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-WR1043ND",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V2",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V4",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-WR1045ND",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "RU V2",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-WR840N",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V2",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V3",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-WR842N",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V2",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V4",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-WR842ND",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V2",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V4",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-WR845N",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V1",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V2",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-WR941ND",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V5",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V6",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "V6_220610",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-WR945N",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-WA801ND",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V4",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-WA901ND",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V4",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "V4_201030",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V5",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "V5_201030",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2023-12-05T19:37:00.000Z",
      "datePublic": "2023-12-19T16:08:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eTP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.\u003c/p\u003e"
            }
          ],
          "value": "TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-290",
              "description": "CWE-290: Authentication Bypass by Spoofing",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-02T17:58:31.299Z",
        "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
        "shortName": "zdi"
      },
      "references": [
        {
          "name": "ZDI-23-1808",
          "tags": [
            "x_research-advisory"
          ],
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-23-1808/"
        },
        {
          "name": "vendor-provided URL",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.tp-link.com/en/support/download/tl-wr841n/v12/#Firmware"
        },
        {
          "name": "vendor-advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.tp-link.com/us/support/faq/5058/"
        }
      ],
      "source": {
        "lang": "en",
        "value": "Aleksandar Djurdjevic \u0027revengsmK\u0027"
      },
      "title": "TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
    "assignerShortName": "zdi",
    "cveId": "CVE-2023-50224",
    "datePublished": "2024-05-03T02:14:42.922Z",
    "dateReserved": "2023-12-05T16:15:17.543Z",
    "dateUpdated": "2026-09-02T17:58:31.299Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2015-3035 (GCVE-0-2015-3035)

Vulnerability from nvd – Published: 2015-04-17 18:00 – Updated: 2025-10-21 23:56

CISA Previdian

Summary

Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (1.0), TL-WDR3600 (1.0), and TL-WDR4300 (1.0) with firmware before 150302, TL-WR740N (5.0) and TL-WR741ND (5.0) with firmware before 150312, and TL-WR841N (9.0), TL-WR841N (10.0), TL-WR841ND (9.0), and TL-WR841ND (10.0) with firmware before 150310 allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: active Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-02-04 21:02 UTC

CWE

n/a
CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Assigner

mitre mitre root Scorecard

References

17 references

URL	Tags
http://www.tp-link.com/en/download/Archer-C9_V1.h…	x_refsource_CONFIRM
http://www.tp-link.com/en/download/Archer-C7_V2.h…	x_refsource_CONFIRM
http://www.tp-link.com/en/download/TL-WR740N_V5.h…	x_refsource_CONFIRM
http://www.tp-link.com/en/download/Archer-C5_V1.2…	x_refsource_CONFIRM
http://packetstormsecurity.com/files/131378/TP-LI…	x_refsource_MISC
http://www.tp-link.com/en/download/TL-WR841N_V9.h…	x_refsource_CONFIRM
http://www.tp-link.com/en/download/TL-WR841ND_V9.…	x_refsource_CONFIRM
http://seclists.org/fulldisclosure/2015/Apr/26	mailing-listx_refsource_FULLDISC
http://www.tp-link.com/en/download/TL-WDR3600_V1.…	x_refsource_CONFIRM
http://www.tp-link.com/en/download/TL-WDR3500_V1.…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/74050	vdb-entryx_refsource_BID
https://www.sec-consult.com/fxdata/seccons/prod/t…	x_refsource_MISC
http://www.tp-link.com/en/download/TL-WR741ND_V5.…	x_refsource_CONFIRM
http://www.tp-link.com/en/download/Archer-C8_V1.h…	x_refsource_CONFIRM
http://www.tp-link.com/en/download/TL-WDR4300_V1.…	x_refsource_CONFIRM
http://www.securityfocus.com/archive/1/535240/100…	mailing-listx_refsource_BUGTRAQ
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource

Date Public

2015-04-10 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:32:21.387Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.tp-link.com/en/download/Archer-C9_V1.html#Firmware"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.tp-link.com/en/download/Archer-C7_V2.html#Firmware"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.tp-link.com/en/download/TL-WR740N_V5.html#Firmware"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.tp-link.com/en/download/Archer-C5_V1.20.html#Firmware"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/131378/TP-LINK-Local-File-Disclosure.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.tp-link.com/en/download/TL-WR841N_V9.html#Firmware"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.tp-link.com/en/download/TL-WR841ND_V9.html#Firmware"
          },
          {
            "name": "20150410 SEC Consult SA-20150410-0 :: Unauthenticated Local File Disclosure in multiple TP-LINK products (CVE-2015-3035)",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2015/Apr/26"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.tp-link.com/en/download/TL-WDR3600_V1.html#Firmware"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.tp-link.com/en/download/TL-WDR3500_V1.html#Firmware"
          },
          {
            "name": "74050",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/74050"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20150410-0_TP-Link_Unauthenticated_local_file_disclosure_vulnerability_v10.txt"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.tp-link.com/en/download/TL-WR741ND_V5.html#Firmware"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.tp-link.com/en/download/Archer-C8_V1.html#Firmware"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.tp-link.com/en/download/TL-WDR4300_V1.html#Firmware"
          },
          {
            "name": "20150410 SEC Consult SA-20150410-0 :: Unauthenticated Local File Disclosure in multiple TP-LINK products (CVE-2015-3035)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/535240/100/0/threaded"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2015-3035",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-04T21:02:10.582295Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2022-03-25",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-3035"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-22",
                "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-21T23:56:02.932Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-3035"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2022-03-25T00:00:00.000Z",
            "value": "CVE-2015-3035 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-04-10T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (1.0), TL-WDR3600 (1.0), and TL-WDR4300 (1.0) with firmware before 150302, TL-WR740N (5.0) and TL-WR741ND (5.0) with firmware before 150312, and TL-WR841N (9.0), TL-WR841N (10.0), TL-WR841ND (9.0), and TL-WR841ND (10.0) with firmware before 150310 allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-09T18:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.tp-link.com/en/download/Archer-C9_V1.html#Firmware"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.tp-link.com/en/download/Archer-C7_V2.html#Firmware"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.tp-link.com/en/download/TL-WR740N_V5.html#Firmware"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.tp-link.com/en/download/Archer-C5_V1.20.html#Firmware"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/131378/TP-LINK-Local-File-Disclosure.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.tp-link.com/en/download/TL-WR841N_V9.html#Firmware"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.tp-link.com/en/download/TL-WR841ND_V9.html#Firmware"
        },
        {
          "name": "20150410 SEC Consult SA-20150410-0 :: Unauthenticated Local File Disclosure in multiple TP-LINK products (CVE-2015-3035)",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2015/Apr/26"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.tp-link.com/en/download/TL-WDR3600_V1.html#Firmware"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.tp-link.com/en/download/TL-WDR3500_V1.html#Firmware"
        },
        {
          "name": "74050",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/74050"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20150410-0_TP-Link_Unauthenticated_local_file_disclosure_vulnerability_v10.txt"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.tp-link.com/en/download/TL-WR741ND_V5.html#Firmware"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.tp-link.com/en/download/Archer-C8_V1.html#Firmware"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.tp-link.com/en/download/TL-WDR4300_V1.html#Firmware"
        },
        {
          "name": "20150410 SEC Consult SA-20150410-0 :: Unauthenticated Local File Disclosure in multiple TP-LINK products (CVE-2015-3035)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/535240/100/0/threaded"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-3035",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (1.0), TL-WDR3600 (1.0), and TL-WDR4300 (1.0) with firmware before 150302, TL-WR740N (5.0) and TL-WR741ND (5.0) with firmware before 150312, and TL-WR841N (9.0), TL-WR841N (10.0), TL-WR841ND (9.0), and TL-WR841ND (10.0) with firmware before 150310 allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.tp-link.com/en/download/Archer-C9_V1.html#Firmware",
              "refsource": "CONFIRM",
              "url": "http://www.tp-link.com/en/download/Archer-C9_V1.html#Firmware"
            },
            {
              "name": "http://www.tp-link.com/en/download/Archer-C7_V2.html#Firmware",
              "refsource": "CONFIRM",
              "url": "http://www.tp-link.com/en/download/Archer-C7_V2.html#Firmware"
            },
            {
              "name": "http://www.tp-link.com/en/download/TL-WR740N_V5.html#Firmware",
              "refsource": "CONFIRM",
              "url": "http://www.tp-link.com/en/download/TL-WR740N_V5.html#Firmware"
            },
            {
              "name": "http://www.tp-link.com/en/download/Archer-C5_V1.20.html#Firmware",
              "refsource": "CONFIRM",
              "url": "http://www.tp-link.com/en/download/Archer-C5_V1.20.html#Firmware"
            },
            {
              "name": "http://packetstormsecurity.com/files/131378/TP-LINK-Local-File-Disclosure.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/131378/TP-LINK-Local-File-Disclosure.html"
            },
            {
              "name": "http://www.tp-link.com/en/download/TL-WR841N_V9.html#Firmware",
              "refsource": "CONFIRM",
              "url": "http://www.tp-link.com/en/download/TL-WR841N_V9.html#Firmware"
            },
            {
              "name": "http://www.tp-link.com/en/download/TL-WR841ND_V9.html#Firmware",
              "refsource": "CONFIRM",
              "url": "http://www.tp-link.com/en/download/TL-WR841ND_V9.html#Firmware"
            },
            {
              "name": "20150410 SEC Consult SA-20150410-0 :: Unauthenticated Local File Disclosure in multiple TP-LINK products (CVE-2015-3035)",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2015/Apr/26"
            },
            {
              "name": "http://www.tp-link.com/en/download/TL-WDR3600_V1.html#Firmware",
              "refsource": "CONFIRM",
              "url": "http://www.tp-link.com/en/download/TL-WDR3600_V1.html#Firmware"
            },
            {
              "name": "http://www.tp-link.com/en/download/TL-WDR3500_V1.html#Firmware",
              "refsource": "CONFIRM",
              "url": "http://www.tp-link.com/en/download/TL-WDR3500_V1.html#Firmware"
            },
            {
              "name": "74050",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/74050"
            },
            {
              "name": "https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20150410-0_TP-Link_Unauthenticated_local_file_disclosure_vulnerability_v10.txt",
              "refsource": "MISC",
              "url": "https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20150410-0_TP-Link_Unauthenticated_local_file_disclosure_vulnerability_v10.txt"
            },
            {
              "name": "http://www.tp-link.com/en/download/TL-WR741ND_V5.html#Firmware",
              "refsource": "CONFIRM",
              "url": "http://www.tp-link.com/en/download/TL-WR741ND_V5.html#Firmware"
            },
            {
              "name": "http://www.tp-link.com/en/download/Archer-C8_V1.html#Firmware",
              "refsource": "CONFIRM",
              "url": "http://www.tp-link.com/en/download/Archer-C8_V1.html#Firmware"
            },
            {
              "name": "http://www.tp-link.com/en/download/TL-WDR4300_V1.html#Firmware",
              "refsource": "CONFIRM",
              "url": "http://www.tp-link.com/en/download/TL-WDR4300_V1.html#Firmware"
            },
            {
              "name": "20150410 SEC Consult SA-20150410-0 :: Unauthenticated Local File Disclosure in multiple TP-LINK products (CVE-2015-3035)",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/535240/100/0/threaded"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-3035",
    "datePublished": "2015-04-17T18:00:00.000Z",
    "dateReserved": "2015-04-08T00:00:00.000Z",
    "dateUpdated": "2025-10-21T23:56:02.932Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-50224 (GCVE-0-2023-50224)

Vulnerability from cvelistv5 – Published: 2024-05-03 02:14 – Updated: 2026-09-02 17:58

CISA Previdian

Title

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability

Summary

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: active Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-09-03 03:55 UTC

CWE

CWE-290 - Authentication Bypass by Spoofing

Assigner

zdi mitre root Scorecard

References

4 references

URL	Tags
https://www.zerodayinitiative.com/advisories/ZDI-…	x_research-advisory
https://www.tp-link.com/en/support/download/tl-wr…	vendor-advisory
https://www.tp-link.com/us/support/faq/5058/	vendor-advisory
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource

Impacted products

23 products

Vendor	Product	Version
TP-Link	TL-WR841N	Affected: 3.16.9 build 200409 (custom) Affected: V8 (custom) Affected: V9 (custom) Affected: V10 (custom) Affected: V11 (custom) Unaffected: V11_211209 (custom) Affected: V12 (custom) Unaffected: V12_230317 (custom)
TP-Link	TL-WR841ND	Affected: V8 (custom) Affected: V9 (custom) Affected: V10 (custom) Affected: V11 (custom) Unaffected: V11_211209 (custom) Affected: V12 (custom) Unaffected: V12_230317 (custom)
TP-Link	TL-MR6400	Affected: V1 (custom) Affected: V2 (custom)
TP-Link	Archer C5	Affected: V2 (custom)
TP-Link	Archer C7	Affected: V2 (custom) Unaffected: V2_241108 (custom) Affected: V3 (custom)
TP-Link	TL-WDR3600	Affected: V2 (custom)
TP-Link	TL-WDR4300	Affected: V1 (custom)
TP-Link	TL-WDR3500	Affected: V2 (custom)
TP-Link	TL-WR740N	Affected: V4 (custom) Affected: V5 (custom) Affected: V6 (custom) Affected: V7 (custom)
TP-Link	TL-WR741ND	Affected: V4 (custom) Affected: V5 (custom) Affected: V6 (custom)
TP-Link	TL-WR749N	Affected: BR 6.0 (custom) Affected: BR 7.0 (custom)
TP-Link	TL-MR3420	Affected: V2 (custom) Affected: V3 (custom) Affected: V4 (custom)
TP-Link	TL-WR1043ND	Affected: V2 (custom) Affected: V3 (custom) Affected: V4 (custom)
TP-Link	TL-WR1045ND	Affected: RU V2 (custom)
TP-Link	TL-WR840N	Affected: V2 (custom) Affected: V3 (custom)
TP-Link	TL-WR842N	Affected: V2 (custom) Affected: V3 (custom) Affected: V4 (custom)
TP-Link	TL-WR842ND	Affected: V2 (custom) Affected: V3 (custom) Affected: V4 (custom)
TP-Link	TL-WR845N	Affected: V1 (custom) Affected: V2 (custom)
TP-Link	TL-WR941ND	Affected: V5 (custom) Affected: V6 (custom) Unaffected: V6_220610 (custom)
TP-Link	TL-WR945N	Affected: V1 (custom)
TP-Link	TL-WA801ND	Affected: V3 (custom) Affected: V4 (custom)
TP-Link	TL-WA901ND	Affected: V3 (custom) Affected: V4 (custom) Unaffected: V4_201030 (custom) Affected: V5 (custom) Unaffected: V5_201030 (custom)
tp-link	tl-wr841n_firmware	Affected: 0 , < 12.0 (custom) cpe:2.3:o:tp-link:tl-wr841n_firmware:-:::::::*

Date Public

2023-12-19 16:08

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:tp-link:tl-wr841n_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "tl-wr841n_firmware",
            "vendor": "tp-link",
            "versions": [
              {
                "lessThan": "12.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-50224",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-09-03T03:55:22.977218Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2025-09-03",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-50224"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-21T23:05:19.610Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-50224"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2025-09-03T00:00:00.000Z",
            "value": "CVE-2023-50224 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T22:09:49.801Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ZDI-23-1808",
            "tags": [
              "x_research-advisory",
              "x_transferred"
            ],
            "url": "https://www.zerodayinitiative.com/advisories/ZDI-23-1808/"
          },
          {
            "name": "vendor-provided URL",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.tp-link.com/en/support/download/tl-wr841n/v12/#Firmware"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "TL-WR841N",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "3.16.9 build 200409",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V8",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V9",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V10",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V11",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "V11_211209",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V12",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "V12_230317",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-WR841ND",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V8",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V9",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V10",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V11",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "V11_211209",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V12",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "V12_230317",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-MR6400",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V1",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V2",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Archer C5",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V2",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Archer C7",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V2",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "V2_241108",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V3",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-WDR3600",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V2",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-WDR4300",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-WDR3500",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V2",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-WR740N",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V4",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V5",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V6",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V7",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-WR741ND",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V4",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V5",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V6",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-WR749N",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "BR 6.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "BR 7.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-MR3420",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V2",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V4",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-WR1043ND",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V2",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V4",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-WR1045ND",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "RU V2",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-WR840N",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V2",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V3",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-WR842N",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V2",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V4",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-WR842ND",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V2",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V4",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-WR845N",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V1",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V2",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-WR941ND",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V5",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V6",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "V6_220610",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-WR945N",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-WA801ND",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V4",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TL-WA901ND",
          "vendor": "TP-Link",
          "versions": [
            {
              "status": "affected",
              "version": "V3",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V4",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "V4_201030",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "V5",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "V5_201030",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2023-12-05T19:37:00.000Z",
      "datePublic": "2023-12-19T16:08:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eTP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.\u003c/p\u003e"
            }
          ],
          "value": "TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-290",
              "description": "CWE-290: Authentication Bypass by Spoofing",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-02T17:58:31.299Z",
        "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
        "shortName": "zdi"
      },
      "references": [
        {
          "name": "ZDI-23-1808",
          "tags": [
            "x_research-advisory"
          ],
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-23-1808/"
        },
        {
          "name": "vendor-provided URL",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.tp-link.com/en/support/download/tl-wr841n/v12/#Firmware"
        },
        {
          "name": "vendor-advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.tp-link.com/us/support/faq/5058/"
        }
      ],
      "source": {
        "lang": "en",
        "value": "Aleksandar Djurdjevic \u0027revengsmK\u0027"
      },
      "title": "TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
    "assignerShortName": "zdi",
    "cveId": "CVE-2023-50224",
    "datePublished": "2024-05-03T02:14:42.922Z",
    "dateReserved": "2023-12-05T16:15:17.543Z",
    "dateUpdated": "2026-09-02T17:58:31.299Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2015-3035 (GCVE-0-2015-3035)

Vulnerability from cvelistv5 – Published: 2015-04-17 18:00 – Updated: 2025-10-21 23:56

CISA Previdian

Summary

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: active Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-02-04 21:02 UTC

CWE

n/a
CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Assigner

mitre mitre root Scorecard

References

17 references

URL	Tags
http://www.tp-link.com/en/download/Archer-C9_V1.h…	x_refsource_CONFIRM
http://www.tp-link.com/en/download/Archer-C7_V2.h…	x_refsource_CONFIRM
http://www.tp-link.com/en/download/TL-WR740N_V5.h…	x_refsource_CONFIRM
http://www.tp-link.com/en/download/Archer-C5_V1.2…	x_refsource_CONFIRM
http://packetstormsecurity.com/files/131378/TP-LI…	x_refsource_MISC
http://www.tp-link.com/en/download/TL-WR841N_V9.h…	x_refsource_CONFIRM
http://www.tp-link.com/en/download/TL-WR841ND_V9.…	x_refsource_CONFIRM
http://seclists.org/fulldisclosure/2015/Apr/26	mailing-listx_refsource_FULLDISC
http://www.tp-link.com/en/download/TL-WDR3600_V1.…	x_refsource_CONFIRM
http://www.tp-link.com/en/download/TL-WDR3500_V1.…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/74050	vdb-entryx_refsource_BID
https://www.sec-consult.com/fxdata/seccons/prod/t…	x_refsource_MISC
http://www.tp-link.com/en/download/TL-WR741ND_V5.…	x_refsource_CONFIRM
http://www.tp-link.com/en/download/Archer-C8_V1.h…	x_refsource_CONFIRM
http://www.tp-link.com/en/download/TL-WDR4300_V1.…	x_refsource_CONFIRM
http://www.securityfocus.com/archive/1/535240/100…	mailing-listx_refsource_BUGTRAQ
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource

Date Public

2015-04-10 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:32:21.387Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.tp-link.com/en/download/Archer-C9_V1.html#Firmware"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.tp-link.com/en/download/Archer-C7_V2.html#Firmware"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.tp-link.com/en/download/TL-WR740N_V5.html#Firmware"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.tp-link.com/en/download/Archer-C5_V1.20.html#Firmware"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/131378/TP-LINK-Local-File-Disclosure.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.tp-link.com/en/download/TL-WR841N_V9.html#Firmware"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.tp-link.com/en/download/TL-WR841ND_V9.html#Firmware"
          },
          {
            "name": "20150410 SEC Consult SA-20150410-0 :: Unauthenticated Local File Disclosure in multiple TP-LINK products (CVE-2015-3035)",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2015/Apr/26"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.tp-link.com/en/download/TL-WDR3600_V1.html#Firmware"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.tp-link.com/en/download/TL-WDR3500_V1.html#Firmware"
          },
          {
            "name": "74050",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/74050"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20150410-0_TP-Link_Unauthenticated_local_file_disclosure_vulnerability_v10.txt"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.tp-link.com/en/download/TL-WR741ND_V5.html#Firmware"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.tp-link.com/en/download/Archer-C8_V1.html#Firmware"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.tp-link.com/en/download/TL-WDR4300_V1.html#Firmware"
          },
          {
            "name": "20150410 SEC Consult SA-20150410-0 :: Unauthenticated Local File Disclosure in multiple TP-LINK products (CVE-2015-3035)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/535240/100/0/threaded"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2015-3035",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-04T21:02:10.582295Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2022-03-25",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-3035"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-22",
                "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-21T23:56:02.932Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-3035"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2022-03-25T00:00:00.000Z",
            "value": "CVE-2015-3035 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-04-10T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (1.0), TL-WDR3600 (1.0), and TL-WDR4300 (1.0) with firmware before 150302, TL-WR740N (5.0) and TL-WR741ND (5.0) with firmware before 150312, and TL-WR841N (9.0), TL-WR841N (10.0), TL-WR841ND (9.0), and TL-WR841ND (10.0) with firmware before 150310 allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-09T18:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.tp-link.com/en/download/Archer-C9_V1.html#Firmware"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.tp-link.com/en/download/Archer-C7_V2.html#Firmware"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.tp-link.com/en/download/TL-WR740N_V5.html#Firmware"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.tp-link.com/en/download/Archer-C5_V1.20.html#Firmware"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/131378/TP-LINK-Local-File-Disclosure.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.tp-link.com/en/download/TL-WR841N_V9.html#Firmware"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.tp-link.com/en/download/TL-WR841ND_V9.html#Firmware"
        },
        {
          "name": "20150410 SEC Consult SA-20150410-0 :: Unauthenticated Local File Disclosure in multiple TP-LINK products (CVE-2015-3035)",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2015/Apr/26"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.tp-link.com/en/download/TL-WDR3600_V1.html#Firmware"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.tp-link.com/en/download/TL-WDR3500_V1.html#Firmware"
        },
        {
          "name": "74050",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/74050"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20150410-0_TP-Link_Unauthenticated_local_file_disclosure_vulnerability_v10.txt"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.tp-link.com/en/download/TL-WR741ND_V5.html#Firmware"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.tp-link.com/en/download/Archer-C8_V1.html#Firmware"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.tp-link.com/en/download/TL-WDR4300_V1.html#Firmware"
        },
        {
          "name": "20150410 SEC Consult SA-20150410-0 :: Unauthenticated Local File Disclosure in multiple TP-LINK products (CVE-2015-3035)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/535240/100/0/threaded"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-3035",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (1.0), TL-WDR3600 (1.0), and TL-WDR4300 (1.0) with firmware before 150302, TL-WR740N (5.0) and TL-WR741ND (5.0) with firmware before 150312, and TL-WR841N (9.0), TL-WR841N (10.0), TL-WR841ND (9.0), and TL-WR841ND (10.0) with firmware before 150310 allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.tp-link.com/en/download/Archer-C9_V1.html#Firmware",
              "refsource": "CONFIRM",
              "url": "http://www.tp-link.com/en/download/Archer-C9_V1.html#Firmware"
            },
            {
              "name": "http://www.tp-link.com/en/download/Archer-C7_V2.html#Firmware",
              "refsource": "CONFIRM",
              "url": "http://www.tp-link.com/en/download/Archer-C7_V2.html#Firmware"
            },
            {
              "name": "http://www.tp-link.com/en/download/TL-WR740N_V5.html#Firmware",
              "refsource": "CONFIRM",
              "url": "http://www.tp-link.com/en/download/TL-WR740N_V5.html#Firmware"
            },
            {
              "name": "http://www.tp-link.com/en/download/Archer-C5_V1.20.html#Firmware",
              "refsource": "CONFIRM",
              "url": "http://www.tp-link.com/en/download/Archer-C5_V1.20.html#Firmware"
            },
            {
              "name": "http://packetstormsecurity.com/files/131378/TP-LINK-Local-File-Disclosure.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/131378/TP-LINK-Local-File-Disclosure.html"
            },
            {
              "name": "http://www.tp-link.com/en/download/TL-WR841N_V9.html#Firmware",
              "refsource": "CONFIRM",
              "url": "http://www.tp-link.com/en/download/TL-WR841N_V9.html#Firmware"
            },
            {
              "name": "http://www.tp-link.com/en/download/TL-WR841ND_V9.html#Firmware",
              "refsource": "CONFIRM",
              "url": "http://www.tp-link.com/en/download/TL-WR841ND_V9.html#Firmware"
            },
            {
              "name": "20150410 SEC Consult SA-20150410-0 :: Unauthenticated Local File Disclosure in multiple TP-LINK products (CVE-2015-3035)",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2015/Apr/26"
            },
            {
              "name": "http://www.tp-link.com/en/download/TL-WDR3600_V1.html#Firmware",
              "refsource": "CONFIRM",
              "url": "http://www.tp-link.com/en/download/TL-WDR3600_V1.html#Firmware"
            },
            {
              "name": "http://www.tp-link.com/en/download/TL-WDR3500_V1.html#Firmware",
              "refsource": "CONFIRM",
              "url": "http://www.tp-link.com/en/download/TL-WDR3500_V1.html#Firmware"
            },
            {
              "name": "74050",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/74050"
            },
            {
              "name": "https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20150410-0_TP-Link_Unauthenticated_local_file_disclosure_vulnerability_v10.txt",
              "refsource": "MISC",
              "url": "https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20150410-0_TP-Link_Unauthenticated_local_file_disclosure_vulnerability_v10.txt"
            },
            {
              "name": "http://www.tp-link.com/en/download/TL-WR741ND_V5.html#Firmware",
              "refsource": "CONFIRM",
              "url": "http://www.tp-link.com/en/download/TL-WR741ND_V5.html#Firmware"
            },
            {
              "name": "http://www.tp-link.com/en/download/Archer-C8_V1.html#Firmware",
              "refsource": "CONFIRM",
              "url": "http://www.tp-link.com/en/download/Archer-C8_V1.html#Firmware"
            },
            {
              "name": "http://www.tp-link.com/en/download/TL-WDR4300_V1.html#Firmware",
              "refsource": "CONFIRM",
              "url": "http://www.tp-link.com/en/download/TL-WDR4300_V1.html#Firmware"
            },
            {
              "name": "20150410 SEC Consult SA-20150410-0 :: Unauthenticated Local File Disclosure in multiple TP-LINK products (CVE-2015-3035)",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/535240/100/0/threaded"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-3035",
    "datePublished": "2015-04-17T18:00:00.000Z",
    "dateReserved": "2015-04-08T00:00:00.000Z",
    "dateUpdated": "2025-10-21T23:56:02.932Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}