NVD

Id
24962  
Name
CVE-2015-3035  
Description
Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (1.0), TL-WDR3600 (1.0), and TL-WDR4300 (1.0) with firmware before 150302, TL-WR740N (5.0) and TL-WR741ND (5.0) with firmware before 150312, and TL-WR841N (9.0), TL-WR841N (10.0), TL-WR841ND (9.0), and TL-WR841ND (10.0) with firmware before 150310 allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-04-21  
Modified Date
2016-12-02  
Seq
2015-3035  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
131617 24962 CVE-2015-3035 http://packetstormsecurity.com/files/131378/TP-LINK-Local-File-Disclosure.html  View
131618 24962 CVE-2015-3035 20150410 SEC Consult SA-20150410-0 :: Unauthenticated Local File Disclosure in multiple TP-LINK products (CVE-2015-3035)  View
131619 24962 CVE-2015-3035 20150410 SEC Consult SA-20150410-0 :: Unauthenticated Local File Disclosure in multiple TP-LINK products (CVE-2015-3035)  View
131620 24962 CVE-2015-3035 74050  View
131621 24962 CVE-2015-3035 http://www.tp-link.com/en/download/Archer-C5_V1.20.html#Firmware  View
131622 24962 CVE-2015-3035 http://www.tp-link.com/en/download/Archer-C7_V2.html#Firmware  View
131623 24962 CVE-2015-3035 http://www.tp-link.com/en/download/Archer-C8_V1.html#Firmware  View
131624 24962 CVE-2015-3035 http://www.tp-link.com/en/download/Archer-C9_V1.html#Firmware  View
131625 24962 CVE-2015-3035 http://www.tp-link.com/en/download/TL-WDR3500_V1.html#Firmware  View
131626 24962 CVE-2015-3035 http://www.tp-link.com/en/download/TL-WDR3600_V1.html#Firmware  View
131627 24962 CVE-2015-3035 http://www.tp-link.com/en/download/TL-WDR4300_V1.html#Firmware  View
131628 24962 CVE-2015-3035 http://www.tp-link.com/en/download/TL-WR740N_V5.html#Firmware  View
131629 24962 CVE-2015-3035 http://www.tp-link.com/en/download/TL-WR741ND_V5.html#Firmware  View
131630 24962 CVE-2015-3035 http://www.tp-link.com/en/download/TL-WR841N_V9.html#Firmware  View
131631 24962 CVE-2015-3035 http://www.tp-link.com/en/download/TL-WR841ND_V9.html#Firmware  View
131632 24962 CVE-2015-3035 https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20150410-0_TP-Link_Unauthenticated_local_file_disclosure_vulnerability_v10.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7159 JVNDB-2015-002479 複数の TP-LINK 製品におけるディレクトリトラバーサルの脆弱性 複数の TP-LINK 製品には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2015-3035 80260 CVE-2015-3035 24962 7.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002479.html 2015-03-02 2015-04-27 View