CVE-2015-3035 — TP-Link Multiple Archer Devices Directory Traversal Vulnerability

CISA KEVExploited: confirmedTP-Link

Directory traversal vulnerability in multiple TP-Link Archer devices allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.

Vulnerability details

Affected productsMultiple Archer Devices
KEV remediation due2022-04-15