Multiple Archer Devices · Sandworm Watch

Mar 25, 2022high

CVE-2015-3035: TP-Link Multiple Archer Devices Directory Traversal Vulnerability

Directory traversal vulnerability in multiple TP-Link Archer devices allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/. Required action: Apply updates per vendor instructions.

CVE-2015-3035EPSS 83.8%Multiple Archer DevicesTP-Link

CISA KEV ↗ · unattributed attribution