CVE-2015-3035

Severity

high · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2022-03-25

Reference

https://nvd.nist.gov/vuln/detail/CVE-2015-3035

⌖ exploited in the wild shame 50/100 exploited-in-wild

Directory traversal vulnerability in multiple TP-Link Archer devices allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.

Players implicated

tp-link · vendor Multiple Archer Devices · product

Description

Directory traversal vulnerability in multiple TP-Link Archer devices allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.