CVE-2020-35575

Published: Dic 26, 2020 Last Modified: Nov 21, 2024
ExploitDB:
Other exploit source:
Google Dorks:
CRITICAL 9,8
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
HIGH 7,5
Source: [email protected]
Access Vector: network
Access Complexity: low
Authentication: none
Confidentiality: partial
Integrity: partial
Availability: partial

Description

AI Translation Available

A password-disclosure issue in the web interface on certain TP-Link devices allows a remote attacker to get full administrative access to the web panel. This affects WA901ND devices before 3.16.9(201211) beta, and Archer C5, Archer C7, MR3420, MR6400, WA701ND, WA801ND, WDR3500, WDR3600, WE843N, WR1043ND, WR1045ND, WR740N, WR741ND, WR749N, WR802N, WR840N, WR841HP, WR841N, WR842N, WR842ND, WR845N, WR940N, WR941HP, WR945N, WR949N, and WRD4300 devices.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,1879
Percentile
1,0th
Updated

EPSS Score Trend (Last 90 Days)

Operating System

Wrd4300 Firmware by Tp-Link

Product Information
Vendor Tp-Link
Product Wrd4300 Firmware
Version -
cpe:2.3:o:tp-link:wrd4300_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Wr842Nd Firmware by Tp-Link

Product Information
Vendor Tp-Link
Product Wr842Nd Firmware
Version -
cpe:2.3:o:tp-link:wr842nd_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Wr842N Firmware by Tp-Link

Product Information
Vendor Tp-Link
Product Wr842N Firmware
Version -
cpe:2.3:o:tp-link:wr842n_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Wr741Nd Firmware by Tp-Link

Product Information
Vendor Tp-Link
Product Wr741Nd Firmware
Version -
cpe:2.3:o:tp-link:wr741nd_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Mr6400 Firmware by Tp-Link

Product Information
Vendor Tp-Link
Product Mr6400 Firmware
Version -
cpe:2.3:o:tp-link:mr6400_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Wr945N Firmware by Tp-Link

Product Information
Vendor Tp-Link
Product Wr945N Firmware
Version -
cpe:2.3:o:tp-link:wr945n_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Wr749N Firmware by Tp-Link

Product Information
Vendor Tp-Link
Product Wr749N Firmware
Version -
cpe:2.3:o:tp-link:wr749n_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Wr841N Firmware by Tp-Link

Product Information
Vendor Tp-Link
Product Wr841N Firmware
Version -
cpe:2.3:o:tp-link:wr841n_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Wr840N Firmware by Tp-Link

Product Information
Vendor Tp-Link
Product Wr840N Firmware
Version -
cpe:2.3:o:tp-link:wr840n_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Wr740N Firmware by Tp-Link

Product Information
Vendor Tp-Link
Product Wr740N Firmware
Version -
cpe:2.3:o:tp-link:wr740n_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Wr1045Nd Firmware by Tp-Link

Product Information
Vendor Tp-Link
Product Wr1045Nd Firmware
Version -
cpe:2.3:o:tp-link:wr1045nd_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Wa701Nd Firmware by Tp-Link

Product Information
Vendor Tp-Link
Product Wa701Nd Firmware
Version -
cpe:2.3:o:tp-link:wa701nd_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Wr841Hp Firmware by Tp-Link

Product Information
Vendor Tp-Link
Product Wr841Hp Firmware
Version -
cpe:2.3:o:tp-link:wr841hp_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Wa901Nd Firmware by Tp-Link

Product Information
Vendor Tp-Link
Product Wa901Nd Firmware
Version Range Affected
To 3.16.9\(201211\)_beta (exclusive)
cpe:2.3:o:tp-link:wa901nd_firmware:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Mr3420 Firmware by Tp-Link

Product Information
Vendor Tp-Link
Product Mr3420 Firmware
Version -
cpe:2.3:o:tp-link:mr3420_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Wr802N Firmware by Tp-Link

Product Information
Vendor Tp-Link
Product Wr802N Firmware
Version -
cpe:2.3:o:tp-link:wr802n_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Wr1043Nd Firmware by Tp-Link

Product Information
Vendor Tp-Link
Product Wr1043Nd Firmware
Version -
cpe:2.3:o:tp-link:wr1043nd_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Wr940N Firmware by Tp-Link

Product Information
Vendor Tp-Link
Product Wr940N Firmware
Version -
cpe:2.3:o:tp-link:wr940n_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

We843N Firmware by Tp-Link

Product Information
Vendor Tp-Link
Product We843N Firmware
Version -
cpe:2.3:o:tp-link:we843n_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Archer C5 Firmware by Tp-Link

Product Information
Vendor Tp-Link
Product Archer C5 Firmware
Version -
cpe:2.3:o:tp-link:archer_c5_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Archer C7 Firmware by Tp-Link

Product Information
Vendor Tp-Link
Product Archer C7 Firmware
Version -
cpe:2.3:o:tp-link:archer_c7_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Wr941Hp Firmware by Tp-Link

Product Information
Vendor Tp-Link
Product Wr941Hp Firmware
Version -
cpe:2.3:o:tp-link:wr941hp_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Wa801Nd Firmware by Tp-Link

Product Information
Vendor Tp-Link
Product Wa801Nd Firmware
Version -
cpe:2.3:o:tp-link:wa801nd_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Wr845N Firmware by Tp-Link

Product Information
Vendor Tp-Link
Product Wr845N Firmware
Version -
cpe:2.3:o:tp-link:wr845n_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Wr949N Firmware by Tp-Link

Product Information
Vendor Tp-Link
Product Wr949N Firmware
Version -
cpe:2.3:o:tp-link:wr949n_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Wdr3500 Firmware by Tp-Link

Product Information
Vendor Tp-Link
Product Wdr3500 Firmware
Version -
cpe:2.3:o:tp-link:wdr3500_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Wdr3600 Firmware by Tp-Link

Product Information
Vendor Tp-Link
Product Wdr3600 Firmware
Version -
cpe:2.3:o:tp-link:wdr3600_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
http://packetstormsecurity.com/files/163274/TP-Link-TL-WR84…
Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/163274/TP-Link-TL-WR841N-Command-Injection…
https://pastebin.com/F8AuUdck
Third Party Advisory
https://pastebin.com/F8AuUdck
https://static.tp-link.com/2020/202012/20201214/wa901ndv5_e…
https://static.tp-link.com/2020/202012/20201214/wa901ndv5_eu_3_16_9_up_boot%282…
https://www.tp-link.com/us/security
Vendor Advisory
https://www.tp-link.com/us/security
http://packetstormsecurity.com/files/163274/TP-Link-TL-WR84…
Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/163274/TP-Link-TL-WR841N-Command-Injection…
https://pastebin.com/F8AuUdck
Third Party Advisory
https://pastebin.com/F8AuUdck
https://static.tp-link.com/2020/202012/20201214/wa901ndv5_e…
https://static.tp-link.com/2020/202012/20201214/wa901ndv5_eu_3_16_9_up_boot%282…
https://www.tp-link.com/us/security
Vendor Advisory
https://www.tp-link.com/us/security