ZeroDay Findings
Sign inSign up

Findings

CVE-2015-3035

TP-Link Multiple Archer Devices Directory Traversal Vulnerability

Published Apr 21, 2015 · updated Jun 16, 2026 · tp-link tl-wr741nd firmware

Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (1.0), TL-WDR3600 (1.0), and TL-WDR4300 (1.0) with firmware before 150302, TL-WR740N (5.0) and TL-WR741ND (5.0) with firmware before 150312, and TL-WR841N (9.0), TL-WR841N (10.0), TL-WR841ND (9.0), and TL-WR841ND (10.0) with firmware before 150310 allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 21, 2015 · Catalog

    Detected

    Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (1.0), TL-WDR3600 (1.0), and TL-WDR4300 (1.0) with firmware before 150302, TL-WR740N (5.0) and TL-WR741ND (5.0) with firmware before 150312, and TL-WR841N (9.0), TL-WR841N (10.0), TL-WR841ND (9.0), and

  2. Mar 25, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Apr 15, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (1.0), TL-WDR3600 (1.0), and TL-WDR4300 (1.0) with firmware before 150302, TL-WR740N (5.0) and TL-WR741ND (5.0) with firmware before 150312, and TL-WR841N (9.0), TL-WR841N (10.0), TL-WR841ND (9.0), and

Required action

Apply updates per vendor instructions.

CISA due date Apr 15, 2022

Affected

  • cpe tp-link/archer c5 firmwareversion unspecified
  • cpe tp-link/archer c7 firmwareversion unspecified
  • cpe tp-link/archer c8 firmwareversion unspecified
  • cpe tp-link/archer c9 firmwareversion unspecified
  • cpe tp-link/tl-wdr3600 firmwareversion unspecified
  • cpe tp-link/tl-wdr4300 firmwareversion unspecified
  • cpe tp-link/tl-wr740n firmwareversion unspecified
  • cpe tp-link/tl-wr741nd firmwareversion unspecified
  • cpe tp-link/tl-wr841n firmwareversion unspecified
  • cpe tp-link/tl-wr841nd firmwareversion unspecified
  • vendor TP-Link Multiple Archer Devicesversion unspecified

Sources

  • CISA KEVCVE-2015-3035

    Directory traversal vulnerability in multiple TP-Link Archer devices allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.

    cisa.gov
  • CVE.orgCVE-2015-3035

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2015-3035

    30-day exploitation probability 83.9%

    first.org
  • Metasploit Modulesauxiliary_gather/tplink_archer_c7_traversal

    Public module reference (normal). Module source is not copied into this catalog.

    rapid7.com
  • NIST NVDCVE-2015-3035

    Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (1.0), TL-WDR3600 (1.0), and TL-WDR4300 (1.0) with firmware before 150302, TL-WR74

    nvd.nist.gov
  • Packet Storm Securityhttp://packetstormsecurity.com/files/131378/TP-LINK-Local-File-Disclosure.html

    Packet Storm link already published on the finding.

    packetstormsecurity.com

References