CVE-2015-3035VulnerabilityPublished 03/25/2022Updated 10/24/2026

CVE-2015-3035: TP-Link Multiple Archer Devices Directory Traversal Vulnerability

Affects TP-Link Multiple Archer DevicesSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 03/25/2022
KEV deadline: 04/15/2022
EPSS: 83.9% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2015-3035 (opens in a new tab)

Description

A directory traversal vulnerability exists in multiple TP-Link Archer devices that allows remote attackers to read arbitrary files by using '..' sequences in the PATH_INFO to the login/ endpoint. This vulnerability has been exploited in the wild and is considered high severity.

Summary

CVE-2015-3035 is a directory traversal vulnerability affecting multiple TP-Link Archer devices. The flaw allows remote attackers to read arbitrary files on the device by including '..' (dot dot) sequences in the PATH_INFO portion of a request to the login/ path. This enables unauthorized file access beyond intended directories. The vulnerability has been confirmed to be exploited in the wild, indicating active use by attackers.

Impact

Exploitation of this vulnerability allows remote attackers to read arbitrary files on affected TP-Link Archer devices. This can lead to disclosure of sensitive information stored on the device, potentially compromising device security and user privacy.

Mitigation

No patch or official remediation information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the device management interface from untrusted networks to reduce exposure.

Weaknesses

CWE-22Path Traversal (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 10:56:29 UTC

Weaknesses

References

Related threats