CVE-2015-3035
TP-Link Multiple Archer Devices
TP-Link Multiple Archer Devices Directory Traversal Vulnerability
What it is
Directory traversal vulnerability in multiple TP-Link Archer devices allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other TP-Link entries on the list
- Multiple Routers TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability CVE-2025-9377 · Sep 3, 2025
- TL-WR841N TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability CVE-2023-50224 · Sep 3, 2025
- TL-WA855RE TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability CVE-2020-24363 · Sep 2, 2025
- Multiple Routers TP-Link Multiple Routers Command Injection Vulnerability CVE-2023-33538 · Jun 16, 2025
- Archer AX21 TP-Link Archer AX-21 Command Injection Vulnerability CVE-2023-1389 · May 1, 2023