CVE-2015-3035 — TP-Link Multiple Archer Devices Directory Traversal Vulnerability

provenance: imported · CVE: CVE-2015-3035

CVE-2015-3035: TP-Link Multiple Archer Devices Directory Traversal Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	TP-Link
Product	Multiple Archer Devices
Date added	2022-03-25
Due date	2022-04-15
Ransomware campaign use	Unknown

Description

Directory traversal vulnerability in multiple TP-Link Archer devices allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2015-3035

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-3035
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog