What’s Vulnerable › Vulnerabilities

CVE-2020-35575

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 7.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-12-26 · updated 2026-06-17

Description

A password-disclosure issue in the web interface on certain TP-Link devices allows a remote attacker to get full administrative access to the web panel. This affects WA901ND devices before 3.16.9(201211) beta, and Archer C5, Archer C7, MR3420, MR6400, WA701ND, WA801ND, WDR3500, WDR3600, WE843N, WR1043ND, WR1045ND, WR740N, WR741ND, WR749N, WR802N, WR840N, WR841HP, WR841N, WR842N, WR842ND, WR845N, WR940N, WR941HP, WR945N, WR949N, and WRD4300 devices.

Affected products

• TP-Link Archer C5 Firmware: all versions
• TP-Link Systems Inc. Archer C7 v5 and v5.8: all versions
• TP-Link Mr3420 Firmware: all versions
• TP-Link Mr6400 Firmware: all versions
• TP-Link Wa701Nd Firmware: all versions
• TP-Link Wa801Nd Firmware: all versions
• TP-Link Wa901Nd Firmware: before 3.16.9\(201211\)_beta — fixed in 3.16.9\(201211\)_beta
• TP-Link Wdr3500 Firmware: all versions
• TP-Link Wdr3600 Firmware: all versions
• TP-Link We843N Firmware: all versions
• TP-Link Wr1043Nd Firmware: all versions
• TP-Link Wr1045Nd Firmware: all versions
• TP-Link Wr740N Firmware: all versions
• TP-Link Wr741Nd Firmware: all versions
• TP-Link Wr749N Firmware: all versions
• TP-Link Wr802N Firmware: all versions
• TP-Link Wr840N Firmware: all versions
• TP-Link Wr841Hp Firmware: all versions
• TP-Link Systems Inc. TL-WR841N v14/v14.6/v14.8: all versions
• TP-Link Wr842N Firmware: all versions
• TP-Link Wr842Nd Firmware: all versions
• TP-Link Wr845N Firmware: all versions
• TP-Link Wr940N Firmware: all versions
• TP-Link Wr941Hp Firmware: all versions
• TP-Link Wr945N Firmware: all versions
• TP-Link Wr949N Firmware: all versions
• TP-Link Wrd4300 Firmware: all versions

How to fix

Upgrade to a fixed version: TP-Link Wa901Nd Firmware 3.16.9\(201211\)_beta. Check the vendor advisory for mitigations.

References

• http://packetstormsecurity.com/files/163274/TP-Link-TL-WR841N-Command-Injection.html
• https://pastebin.com/F8AuUdck
• https://static.tp-link.com/2020/202012/20201214/wa901ndv5_eu_3_16_9_up_boot%28201211%29.zip
• https://www.tp-link.com/us/security
• http://packetstormsecurity.com/files/163274/TP-Link-TL-WR841N-Command-Injection.html
• https://pastebin.com/F8AuUdck
• https://static.tp-link.com/2020/202012/20201214/wa901ndv5_eu_3_16_9_up_boot%28201211%29.zip
• https://www.tp-link.com/us/security

Get alerted when CVE-2020-35575 or the next vulnerability affects your stack