VAR-201504-0534

Vulnerability from variot - Updated: 2025-11-18 15:24

Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (1.0), TL-WDR3600 (1.0), and TL-WDR4300 (1.0) with firmware before 150302, TL-WR740N (5.0) and TL-WR741ND (5.0) with firmware before 150312, and TL-WR841N (9.0), TL-WR841N (10.0), TL-WR841ND (9.0), and TL-WR841ND (10.0) with firmware before 150310 allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/. plural TP-LINK The product contains a directory traversal vulnerability.By a third party .. of PATH_INFO Any file may be read via. TP-Link is a well-known supplier of network and communication equipment. Allows an attacker to exploit this vulnerability to obtain sensitive information and initiate further attacks. TP-LINK Archer C5, etc. are all wireless router products of China Pulian (TP-LINK) company. A remote attacker can use the directory traversal character '..' to exploit this vulnerability to read arbitrary files. The following products and versions are affected: TP-LINK Archer C5 (hardware version: version 1.2) using firmware earlier than 150317, C7 (hardware version: version 2.0) using firmware earlier than 150304, C8 (hardware version) using firmware earlier than 150316 Version: Version 1.0), Archer C9 (Hardware Version: Version 1.0), TL-WDR3500 (Hardware Version: Version 1.0), TL-WDR3600 (Hardware Version: Version 1.0), TL-WDR4300 (Hardware Version : version 1.0); TL-WR740N (hardware version: version 5.0) and TL-WR741ND (hardware version: version 5.0) with firmware version earlier than 150312; TL-WR841N (hardware version: version 9.0) with firmware version earlier than 150310, TL-WR841N (hardware version: version 10.0), TL-WR841ND (hardware version: version 9.0)

Show details on source website
To clipboard 

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201504-0534",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "tl-wr841nd \\",
        "scope": "eq",
        "trust": 2.2,
        "vendor": "tp link",
        "version": "150104"
      },
      {
        "model": "tl-wr841n \\",
        "scope": "eq",
        "trust": 2.0,
        "vendor": "tp link",
        "version": "*"
      },
      {
        "model": "archer c5 \\",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "tp link",
        "version": "141126"
      },
      {
        "model": "archer c8 \\",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "tp link",
        "version": "141023"
      },
      {
        "model": "tl-wdr3600 \\",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "tp link",
        "version": "141022"
      },
      {
        "model": "tl-wr841nd \\",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "tp link",
        "version": "150104"
      },
      {
        "model": "tl-wr740n \\",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "tp link",
        "version": "141217"
      },
      {
        "model": "archer c9 \\",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "tp link",
        "version": "150122"
      },
      {
        "model": "tl-wr741nd \\",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "tp link",
        "version": "141217"
      },
      {
        "model": "tl-wr741nd \\",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "tp link",
        "version": null
      },
      {
        "model": "tl-wdr3500 \\",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "tp link",
        "version": "141113"
      },
      {
        "model": "archer c7 \\",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "tp link",
        "version": "141110"
      },
      {
        "model": "tl-wdr4300 \\",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "tp link",
        "version": "141113"
      },
      {
        "model": "archer c5",
        "scope": null,
        "trust": 0.8,
        "vendor": "tp link",
        "version": null
      },
      {
        "model": "archer c5",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "tp link",
        "version": "v1.2_150317"
      },
      {
        "model": "archer c7",
        "scope": null,
        "trust": 0.8,
        "vendor": "tp link",
        "version": null
      },
      {
        "model": "archer c7",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "tp link",
        "version": "v2_150304"
      },
      {
        "model": "archer c8",
        "scope": null,
        "trust": 0.8,
        "vendor": "tp link",
        "version": null
      },
      {
        "model": "archer c8",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "tp link",
        "version": "v1_150316"
      },
      {
        "model": "archer c9",
        "scope": null,
        "trust": 0.8,
        "vendor": "tp link",
        "version": null
      },
      {
        "model": "archer c9",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "tp link",
        "version": "v1_150302"
      },
      {
        "model": "tl-wdr3500",
        "scope": null,
        "trust": 0.8,
        "vendor": "tp link",
        "version": null
      },
      {
        "model": "tl-wdr3500",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "tp link",
        "version": "v1_150302"
      },
      {
        "model": "tl-wdr3600",
        "scope": null,
        "trust": 0.8,
        "vendor": "tp link",
        "version": null
      },
      {
        "model": "tl-wdr3600",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "tp link",
        "version": "v1_150302"
      },
      {
        "model": "tl-wdr4300",
        "scope": null,
        "trust": 0.8,
        "vendor": "tp link",
        "version": null
      },
      {
        "model": "tl-wdr4300",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "tp link",
        "version": "v1_150302"
      },
      {
        "model": "tl-wr740n",
        "scope": null,
        "trust": 0.8,
        "vendor": "tp link",
        "version": null
      },
      {
        "model": "tl-wr740n",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "tp link",
        "version": "v5_150312"
      },
      {
        "model": "tl-wr741nd",
        "scope": null,
        "trust": 0.8,
        "vendor": "tp link",
        "version": null
      },
      {
        "model": "tl-wr741nd",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "tp link",
        "version": "v5_150312"
      },
      {
        "model": "tl-wr841n",
        "scope": null,
        "trust": 0.8,
        "vendor": "tp link",
        "version": null
      },
      {
        "model": "tl-wr841n",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "tp link",
        "version": "v10_150310"
      },
      {
        "model": "tl-wr841n",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "tp link",
        "version": "v9_150310"
      },
      {
        "model": "tl-wr841nd",
        "scope": null,
        "trust": 0.8,
        "vendor": "tp link",
        "version": null
      },
      {
        "model": "tl-wr841nd",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "tp link",
        "version": "v10_150310"
      },
      {
        "model": "tl-wr841nd",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "tp link",
        "version": "v9_150310"
      },
      {
        "model": "routers",
        "scope": null,
        "trust": 0.6,
        "vendor": "tp link",
        "version": null
      },
      {
        "model": "archer c9 \\",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "tp link",
        "version": "150122"
      },
      {
        "model": "archer c7 \\",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "tp link",
        "version": "141110"
      },
      {
        "model": "tl-wr741nd \\",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "tp link",
        "version": "141217"
      },
      {
        "model": "tl-wr841n \\",
        "scope": null,
        "trust": 0.6,
        "vendor": "tp link",
        "version": null
      },
      {
        "model": "tl-wdr3600 \\",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "tp link",
        "version": "141022"
      },
      {
        "model": "archer c8 \\",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "tp link",
        "version": "141023"
      },
      {
        "model": "tl-wdr3500 \\",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "tp link",
        "version": "141113"
      },
      {
        "model": "tl-wdr4300 \\",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "tp link",
        "version": "141113"
      },
      {
        "model": "tl-wr841nd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "tp link",
        "version": "9.0"
      },
      {
        "model": "tl-wr841nd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "tp link",
        "version": "10.0"
      },
      {
        "model": "tl-wr841n",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "tp link",
        "version": "9.0"
      },
      {
        "model": "tl-wr841n",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "tp link",
        "version": "10.0"
      },
      {
        "model": "tl-wr741nd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "tp link",
        "version": "5.0"
      },
      {
        "model": "tl-wr740n",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "tp link",
        "version": "5.0"
      },
      {
        "model": "tl-wdr4300",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "tp link",
        "version": "1.0"
      },
      {
        "model": "tl-wdr3600",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "tp link",
        "version": "1.0"
      },
      {
        "model": "tl-wdr3500",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "tp link",
        "version": "1.0"
      },
      {
        "model": "archer c9",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "tp link",
        "version": "1.0"
      },
      {
        "model": "archer c8",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "tp link",
        "version": "1.0"
      },
      {
        "model": "archer c7",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "tp link",
        "version": "2.0"
      },
      {
        "model": "archer c5",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "tp link",
        "version": "1.2"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2015-02404"
      },
      {
        "db": "BID",
        "id": "74050"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201504-440"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-002479"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-3035"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/h:tp-link:archer_c5",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:tp-link:archer_c5_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:tp-link:archer_c7",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:tp-link:archer_c7_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:tp-link:archer_c8",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:tp-link:archer_c8_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:tp-link:archer_c9",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:tp-link:archer_c9_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:tp-link:tl-wdr3500",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:tp-link:tl-wdr3500_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:tp-link:tl-wdr3600",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:tp-link:tl-wdr3600_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:tp-link:tl-wdr4300",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:tp-link:tl-wdr4300_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:tp-link:tl-wr740n",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:tp-link:tl-wr740n_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:tp-link:tl-wrd741nd",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:tp-link:tl-wrd741nd_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:tp-link:tl-wr841n",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:tp-link:tl-wr841n_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:tp-link:tl-wrd841nd",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:tp-link:tl-wrd841nd_firmware",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-002479"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "SEC Consult Vulnerability Lab",
    "sources": [
      {
        "db": "BID",
        "id": "74050"
      }
    ],
    "trust": 0.3
  },
  "cve": "CVE-2015-3035",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "NONE",
            "baseScore": 7.8,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 10.0,
            "id": "CVE-2015-3035",
            "impactScore": 6.9,
            "integrityImpact": "NONE",
            "severity": "HIGH",
            "trust": 1.9,
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "NONE",
            "baseScore": 5.0,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "CNVD-2015-02404",
            "impactScore": 2.9,
            "integrityImpact": "NONE",
            "severity": "MEDIUM",
            "trust": 0.6,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "NONE",
            "baseScore": 7.8,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 10.0,
            "id": "VHN-80996",
            "impactScore": 6.9,
            "integrityImpact": "NONE",
            "severity": "HIGH",
            "trust": 0.1,
            "vectorString": "AV:N/AC:L/AU:N/C:C/I:N/A:N",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 3.9,
            "id": "CVE-2015-3035",
            "impactScore": 3.6,
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 2.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2015-3035",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
            "id": "CVE-2015-3035",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "NVD",
            "id": "CVE-2015-3035",
            "trust": 0.8,
            "value": "High"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2015-02404",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201504-440",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "VULHUB",
            "id": "VHN-80996",
            "trust": 0.1,
            "value": "HIGH"
          },
          {
            "author": "VULMON",
            "id": "CVE-2015-3035",
            "trust": 0.1,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2015-02404"
      },
      {
        "db": "VULHUB",
        "id": "VHN-80996"
      },
      {
        "db": "VULMON",
        "id": "CVE-2015-3035"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201504-440"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-002479"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-3035"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-3035"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (1.0), TL-WDR3600 (1.0), and TL-WDR4300 (1.0) with firmware before 150302, TL-WR740N (5.0) and TL-WR741ND (5.0) with firmware before 150312, and TL-WR841N (9.0), TL-WR841N (10.0), TL-WR841ND (9.0), and TL-WR841ND (10.0) with firmware before 150310 allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/. plural TP-LINK The product contains a directory traversal vulnerability.By a third party .. of PATH_INFO Any file may be read via. TP-Link is a well-known supplier of network and communication equipment. Allows an attacker to exploit this vulnerability to obtain sensitive information and initiate further attacks. TP-LINK Archer C5, etc. are all wireless router products of China Pulian (TP-LINK) company. A remote attacker can use the directory traversal character \u0027..\u0027 to exploit this vulnerability to read arbitrary files. The following products and versions are affected: TP-LINK Archer C5 (hardware version: version 1.2) using firmware earlier than 150317, C7 (hardware version: version 2.0) using firmware earlier than 150304, C8 (hardware version) using firmware earlier than 150316 Version: Version 1.0), Archer C9 (Hardware Version: Version 1.0), TL-WDR3500 (Hardware Version: Version 1.0), TL-WDR3600 (Hardware Version: Version 1.0), TL-WDR4300 (Hardware Version : version 1.0); TL-WR740N (hardware version: version 5.0) and TL-WR741ND (hardware version: version 5.0) with firmware version earlier than 150312; TL-WR841N (hardware version: version 9.0) with firmware version earlier than 150310, TL-WR841N (hardware version: version 10.0), TL-WR841ND (hardware version: version 9.0)",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2015-3035"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-002479"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2015-02404"
      },
      {
        "db": "BID",
        "id": "74050"
      },
      {
        "db": "VULHUB",
        "id": "VHN-80996"
      },
      {
        "db": "VULMON",
        "id": "CVE-2015-3035"
      }
    ],
    "trust": 2.61
  },
  "exploit_availability": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "reference": "https://www.scap.org.cn/vuln/vhn-80996",
        "trust": 0.1,
        "type": "unknown"
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-80996"
      }
    ]
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2015-3035",
        "trust": 3.5
      },
      {
        "db": "BID",
        "id": "74050",
        "trust": 2.1
      },
      {
        "db": "PACKETSTORM",
        "id": "131378",
        "trust": 1.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-002479",
        "trust": 0.8
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201504-440",
        "trust": 0.7
      },
      {
        "db": "CNVD",
        "id": "CNVD-2015-02404",
        "trust": 0.6
      },
      {
        "db": "VULHUB",
        "id": "VHN-80996",
        "trust": 0.1
      },
      {
        "db": "VULMON",
        "id": "CVE-2015-3035",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2015-02404"
      },
      {
        "db": "VULHUB",
        "id": "VHN-80996"
      },
      {
        "db": "VULMON",
        "id": "CVE-2015-3035"
      },
      {
        "db": "BID",
        "id": "74050"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201504-440"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-002479"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-3035"
      }
    ]
  },
  "id": "VAR-201504-0534",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2015-02404"
      },
      {
        "db": "VULHUB",
        "id": "VHN-80996"
      }
    ],
    "trust": 1.2531959525
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "Network device"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2015-02404"
      }
    ]
  },
  "last_update_date": "2025-11-18T15:24:53.440000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "Download for Archer C5 V1.20",
        "trust": 0.8,
        "url": "http://www.tp-link.com/en/download/Archer-C5_V1.20.html#Firmware"
      },
      {
        "title": "Download for TL-WR841N V9",
        "trust": 0.8,
        "url": "http://www.tp-link.com/en/download/TL-WR841N_V9.html#Firmware"
      },
      {
        "title": "Download for TL-WDR4300 V1",
        "trust": 0.8,
        "url": "http://www.tp-link.com/en/download/TL-WDR4300_V1.html#Firmware"
      },
      {
        "title": "Download for TL-WR740N V5",
        "trust": 0.8,
        "url": "http://www.tp-link.com/en/download/TL-WR740N_V5.html#Firmware"
      },
      {
        "title": "Download for Archer C7 V2",
        "trust": 0.8,
        "url": "http://www.tp-link.com/en/download/Archer-C7_V2.html#Firmware"
      },
      {
        "title": "Download for Archer C9 V1",
        "trust": 0.8,
        "url": "http://www.tp-link.com/en/download/Archer-C9_V1.html#Firmware"
      },
      {
        "title": "Download for TL-WDR3500 V1",
        "trust": 0.8,
        "url": "http://www.tp-link.com/en/download/TL-WDR3500_V1.html#Firmware"
      },
      {
        "title": "Download for TL-WR841ND V9",
        "trust": 0.8,
        "url": "http://www.tp-link.com/en/download/TL-WR841ND_V9.html#Firmware"
      },
      {
        "title": "Download for TL-WR841N V10",
        "trust": 0.8,
        "url": "http://www.tp-link.com/en/download/TL-WR841N_V10.html#Firmware"
      },
      {
        "title": "Download for Archer C8 V1",
        "trust": 0.8,
        "url": "http://www.tp-link.com/en/download/Archer-C8_V1.html#Firmware"
      },
      {
        "title": "Download for TL-WR841ND V10",
        "trust": 0.8,
        "url": "http://www.tp-link.com/en/download/TL-WR841ND_V10.html#Firmware"
      },
      {
        "title": "Download for TL-WR741ND V5",
        "trust": 0.8,
        "url": "http://www.tp-link.com/en/download/TL-WR741ND_V5.html#Firmware"
      },
      {
        "title": "Download for TL-WDR3600 V1",
        "trust": 0.8,
        "url": "http://www.tp-link.com/en/download/TL-WDR3600_V1.html#Firmware"
      },
      {
        "title": "Patch for multiple TP-LINK product catalog traversal vulnerabilities",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/57321"
      },
      {
        "title": "Known Exploited Vulnerabilities Detector",
        "trust": 0.1,
        "url": "https://github.com/Ostorlab/KEV "
      },
      {
        "title": "Kenzer Templates [5170] [DEPRECATED]",
        "trust": 0.1,
        "url": "https://github.com/ARPSyndicate/kenzer-templates "
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2015-02404"
      },
      {
        "db": "VULMON",
        "id": "CVE-2015-3035"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-002479"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-22",
        "trust": 1.9
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-80996"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-002479"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-3035"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.1,
        "url": "https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20150410-0_tp-link_unauthenticated_local_file_disclosure_vulnerability_v10.txt"
      },
      {
        "trust": 1.9,
        "url": "http://www.securityfocus.com/bid/74050"
      },
      {
        "trust": 1.9,
        "url": "http://packetstormsecurity.com/files/131378/tp-link-local-file-disclosure.html"
      },
      {
        "trust": 1.8,
        "url": "http://www.tp-link.com/en/download/archer-c5_v1.20.html#firmware"
      },
      {
        "trust": 1.8,
        "url": "http://www.tp-link.com/en/download/archer-c7_v2.html#firmware"
      },
      {
        "trust": 1.8,
        "url": "http://www.tp-link.com/en/download/archer-c8_v1.html#firmware"
      },
      {
        "trust": 1.8,
        "url": "http://www.tp-link.com/en/download/archer-c9_v1.html#firmware"
      },
      {
        "trust": 1.8,
        "url": "http://www.tp-link.com/en/download/tl-wdr3500_v1.html#firmware"
      },
      {
        "trust": 1.8,
        "url": "http://www.tp-link.com/en/download/tl-wdr3600_v1.html#firmware"
      },
      {
        "trust": 1.8,
        "url": "http://www.tp-link.com/en/download/tl-wdr4300_v1.html#firmware"
      },
      {
        "trust": 1.8,
        "url": "http://www.tp-link.com/en/download/tl-wr740n_v5.html#firmware"
      },
      {
        "trust": 1.8,
        "url": "http://www.tp-link.com/en/download/tl-wr741nd_v5.html#firmware"
      },
      {
        "trust": 1.8,
        "url": "http://www.tp-link.com/en/download/tl-wr841nd_v9.html#firmware"
      },
      {
        "trust": 1.8,
        "url": "http://www.tp-link.com/en/download/tl-wr841n_v9.html#firmware"
      },
      {
        "trust": 1.8,
        "url": "http://seclists.org/fulldisclosure/2015/apr/26"
      },
      {
        "trust": 1.2,
        "url": "http://www.securityfocus.com/archive/1/535240/100/0/threaded"
      },
      {
        "trust": 1.0,
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=cve-2015-3035"
      },
      {
        "trust": 0.8,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-3035"
      },
      {
        "trust": 0.8,
        "url": "https://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-3035"
      },
      {
        "trust": 0.6,
        "url": "http://www.securityfocus.com/archive/1/archive/1/535240/100/0/threaded"
      },
      {
        "trust": 0.3,
        "url": "http://www.tp-link.com/en/"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/22.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      },
      {
        "trust": 0.1,
        "url": "https://github.com/ostorlab/kev"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2015-02404"
      },
      {
        "db": "VULHUB",
        "id": "VHN-80996"
      },
      {
        "db": "VULMON",
        "id": "CVE-2015-3035"
      },
      {
        "db": "BID",
        "id": "74050"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201504-440"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-002479"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-3035"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2015-02404"
      },
      {
        "db": "VULHUB",
        "id": "VHN-80996"
      },
      {
        "db": "VULMON",
        "id": "CVE-2015-3035"
      },
      {
        "db": "BID",
        "id": "74050"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201504-440"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-002479"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-3035"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2015-04-15T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2015-02404"
      },
      {
        "date": "2015-04-22T00:00:00",
        "db": "VULHUB",
        "id": "VHN-80996"
      },
      {
        "date": "2015-04-22T00:00:00",
        "db": "VULMON",
        "id": "CVE-2015-3035"
      },
      {
        "date": "2015-04-10T00:00:00",
        "db": "BID",
        "id": "74050"
      },
      {
        "date": "2015-04-22T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201504-440"
      },
      {
        "date": "2015-04-27T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2015-002479"
      },
      {
        "date": "2015-04-22T01:59:02.553000",
        "db": "NVD",
        "id": "CVE-2015-3035"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2015-04-15T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2015-02404"
      },
      {
        "date": "2018-10-09T00:00:00",
        "db": "VULHUB",
        "id": "VHN-80996"
      },
      {
        "date": "2018-10-09T00:00:00",
        "db": "VULMON",
        "id": "CVE-2015-3035"
      },
      {
        "date": "2015-04-10T00:00:00",
        "db": "BID",
        "id": "74050"
      },
      {
        "date": "2015-04-30T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201504-440"
      },
      {
        "date": "2015-04-27T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2015-002479"
      },
      {
        "date": "2025-10-22T00:15:42.857000",
        "db": "NVD",
        "id": "CVE-2015-3035"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201504-440"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "plural  TP-LINK Directory traversal vulnerability in products",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-002479"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "path traversal",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201504-440"
      }
    ],
    "trust": 0.6
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.