CRITICAL🇵🇱 Wersja polska

CVE-2020-35575

CVSS 9.8v3.1pub. 2020-12-26upd. 2024-11-21

A password-disclosure issue in the web interface on certain TP-Link devices allows a remote attacker to get full administrative access to the web panel. This affects WA901ND devices before 3.16.9(201211) beta, and Archer C5, Archer C7, MR3420, MR6400, WA701ND, WA801ND, WDR3500, WDR3600, WE843N, WR1043ND, WR1045ND, WR740N, WR741ND, WR749N, WR802N, WR840N, WR841HP, WR841N, WR842N, WR842ND, WR845N, WR940N, WR941HP, WR945N, WR949N, and WRD4300 devices.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Tp Link Archer C5

    HW
    Tp-Link
    all versions

  • Tp Link Archer C5 Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Archer C7

    HW
    Tp-Link
    all versions

  • Tp Link Archer C7 Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Mr3420

    HW
    Tp-Link
    all versions

  • Tp Link Mr3420 Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Mr6400

    HW
    Tp-Link
    all versions

  • Tp Link Mr6400 Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Wa701nd

    HW
    Tp-Link
    all versions

  • Tp Link Wa701nd Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Wa801nd

    HW
    Tp-Link
    all versions

  • Tp Link Wa801nd Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Wa901nd

    HW
    Tp-Link
    all versions

  • Tp Link Wa901nd Firmware

    OS
    Tp-Link
    < 3.16.9\(201211\)_beta

  • Tp Link Wdr3500

    HW
    Tp-Link
    all versions

  • Tp Link Wdr3500 Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Wdr3600

    HW
    Tp-Link
    all versions

  • Tp Link Wdr3600 Firmware

    OS
    Tp-Link
    all versions

  • Tp Link We843n

    HW
    Tp-Link
    all versions

  • Tp Link We843n Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Wr1043nd

    HW
    Tp-Link
    all versions

  • Tp Link Wr1043nd Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Wr1045nd

    HW
    Tp-Link
    all versions

  • Tp Link Wr1045nd Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Wr740n

    HW
    Tp-Link
    all versions

  • Tp Link Wr740n Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Wr741nd

    HW
    Tp-Link
    all versions

  • Tp Link Wr741nd Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Wr749n

    HW
    Tp-Link
    all versions

  • Tp Link Wr749n Firmware

    OS
    Tp-Link
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2022-4498CRITICAL9.8PL ✓same product

Heap overflow w httpd routerów TP-Link Archer C5 i WR710N-V1 umożliwiający RCE

CVE-2025-9377HIGH8.6⚠ KEVsame product

The authenticated remote command execution (RCE) vulnerability exists in the Parental Control page on TP-Link...

CVE-2015-3035HIGH7.5⚠ KEVsame product

Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmwa...

CVE-2025-25427HIGH8.6same product

A stored cross-site scripting (XSS) vulnerability in the upnp.htm page of the web Interface in TP-Link WR841N ...

CVE-2023-39224HIGH8.0same product

Archer C5 firmware all versions and Archer C7 firmware versions prior to 'Archer C7(JP)_V2_230602' allow a net...