Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (1.0), TL-WDR3600 (1.0), and TL-WDR4300 (1.0) with firmware before 150302, TL-WR740N (5.0) and TL-WR741ND (5.0) with firmware before 150312, and TL-WR841N (9.0), TL-WR841N (10.0), TL-WR841ND (9.0), and TL-WR841ND (10.0) with firmware before 150310 allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2022-04-15. Apply updates per vendor instructions.
Priority
LOW
Exploitation
ACTIVE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
6 versions affected across 22 products
8 new OPEN, 37 new PRO (8 + 29) Lumma Stealer, TA569, Coruna EK, CVE-2012-0391, CVE-2015-3035, CVE-2019-1003030, CVE-2020-14750, CVE-2022-34713, CVE-2025-8110, and many more. https://community.emergingthreats.net/t/ruleset-update-summary-2026-10-26-v11319/3490
24 of 24 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tp-link | archer_c5 | 1.20 | - | - |
| OS | tp-link | archer_c5_firmware | - | - | - |
| HW | tp-link | archer_c7 | 2 | - | - |
| OS | tp-link | archer_c7_firmware | - | - | - |
| HW | tp-link | archer_c8 | 1 | - | - |
| OS | tp-link | archer_c8_firmware | - | - | - |
| HW | tp-link | archer_c9 | 1 | - | - |
| OS | tp-link | archer_c9_firmware | - | - | - |
| HW | tp-link | tl-wdr3500 | 1 | - | - |
| OS | tp-link | tl-wdr3500_firmware | - | - | - |
| HW | tp-link | tl-wdr3600 | 1 | - | - |
| OS | tp-link | tl-wdr3600_firmware | - | - | - |
| HW | tp-link | tl-wdr4300 | 1 | - | - |
| OS | tp-link | tl-wdr4300_firmware | - | - | - |
| HW | tp-link | tl-wr740n | 5 | - | - |
| OS | tp-link | tl-wr740n_firmware | - | - | - |
| HW | tp-link | tl-wr741nd | 5 | - | - |
| OS | tp-link | tl-wr741nd_firmware | - | - | - |
| HW | tp-link | tl-wr841n | 10 | - | - |
| HW | tp-link | tl-wr841n | 9 | - | - |
| OS | tp-link | tl-wr841n_firmware | - | - | - |
| HW | tp-link | tl-wr841nd | 10 | - | - |
| HW | tp-link | tl-wr841nd | 9 | - | - |
| OS | tp-link | tl-wr841nd_firmware | - | - | - |