What’s Vulnerable › Vulnerabilities

CVE-2015-3035: TP-Link Multiple Archer Devices Directory Traversal Vulnerability

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2022-03-25
• EPSS: 83.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2015-04-22 · updated 2026-06-17
• Weakness: CWE-22

Description

Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (1.0), TL-WDR3600 (1.0), and TL-WDR4300 (1.0) with firmware before 150302, TL-WR740N (5.0) and TL-WR741ND (5.0) with firmware before 150312, and TL-WR841N (9.0), TL-WR841N (10.0), TL-WR841ND (9.0), and TL-WR841ND (10.0) with firmware before 150310 allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.

Affected products

• TP-Link Archer C5 Firmware: before 150317 — fixed in 150317
• TP-Link Systems Inc. Archer C7 v5 and v5.8: before 150304 — fixed in 150304
• TP-Link Archer C8 Firmware: before 150316 — fixed in 150316
• TP-Link Archer C9 A1: before 150302 — fixed in 150302
• TP-Link Tl-Wdr3500 Firmware: before 150302 — fixed in 150302
• TP-Link Tl-Wdr3600 Firmware: before 150302 — fixed in 150302
• TP-Link Tl-Wdr4300 Firmware: before 150302 — fixed in 150302
• TP-Link TL-WR740N: before 150312 — fixed in 150312
• TP-Link Tl-Wr741Nd Firmware: before 150312 — fixed in 150312
• TP-Link TL-WR841N: before 150310 — fixed in 150310
• TP-Link TL-WR841ND: before 150310 — fixed in 150310

How to fix

Upgrade to a fixed version: TP-Link Archer C5 Firmware 150317; TP-Link Systems Inc. Archer C7 v5 and v5.8 150304; TP-Link Archer C8 Firmware 150316; TP-Link Archer C9 A1 150302; TP-Link Tl-Wdr3500 Firmware 150302; TP-Link Tl-Wdr3600 Firmware 150302; TP-Link Tl-Wdr4300 Firmware 150302; TP-Link TL-WR740N 150312; TP-Link Tl-Wr741Nd Firmware 150312; TP-Link TL-WR841N 150310; TP-Link TL-WR841ND 150310. Check the vendor advisory for mitigations.

References

• http://packetstormsecurity.com/files/131378/TP-LINK-Local-File-Disclosure.html
• http://seclists.org/fulldisclosure/2015/Apr/26
• http://www.securityfocus.com/archive/1/535240/100/0/threaded
• http://www.securityfocus.com/bid/74050
• http://www.tp-link.com/en/download/Archer-C5_V1.20.html#Firmware
• http://www.tp-link.com/en/download/Archer-C7_V2.html#Firmware
• http://www.tp-link.com/en/download/Archer-C8_V1.html#Firmware
• http://www.tp-link.com/en/download/Archer-C9_V1.html#Firmware
• http://www.tp-link.com/en/download/TL-WDR3500_V1.html#Firmware
• http://www.tp-link.com/en/download/TL-WDR3600_V1.html#Firmware
• http://www.tp-link.com/en/download/TL-WDR4300_V1.html#Firmware
• http://www.tp-link.com/en/download/TL-WR740N_V5.html#Firmware

Get alerted when CVE-2015-3035 or the next vulnerability affects your stack