coldbraid

CVE-2015-3035 TP-Link Multiple Archer Devices

Directory traversal vulnerability in multiple TP-Link Archer devices allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.

CVSS
not scored

CWE-22

On CISA’s exploited list

TP-Link Multiple Archer Devices Directory Traversal Vulnerability

Added
2022-03-25
Federal patch deadline
2022-04-15
Ransomware use
not known