Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-35575

A password-disclosure issue in the web interface on certain TP-Link devices allows a remote attacker to get full administrative access to the web panel. This affects WA901ND devices before 3.16.9(201211) beta, and Archer C5, Archer C7, MR3420, MR6400, WA701ND, WA801ND, WDR3500, WDR3600, WE843N, WR1043ND, WR1045ND, WR740N, WR741ND, WR749N, WR802N, WR840N, WR841HP, WR841N, WR842N, WR842ND, WR845N, WR940N, WR941HP, WR945N, WR949N, and WRD4300 devices.

Published

2020-12-26T02:15:12.870

Last Modified

2024-11-21T05:27:36.917

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System tp-link wa901nd_firmware < 3.16.9\(201211\)_beta Yes
Hardware tp-link wa901nd - No
Operating System tp-link archer_c5_firmware - Yes
Hardware tp-link archer_c5 - No
Operating System tp-link archer_c7_firmware - Yes
Hardware tp-link archer_c7 - No
Operating System tp-link mr3420_firmware - Yes
Hardware tp-link mr3420 - No
Operating System tp-link mr6400_firmware - Yes
Hardware tp-link mr6400 - No
Operating System tp-link wa701nd_firmware - Yes
Hardware tp-link wa701nd - No
Operating System tp-link wa801nd_firmware - Yes
Hardware tp-link wa801nd - No
Operating System tp-link wdr3500_firmware - Yes
Hardware tp-link wdr3500 - No
Operating System tp-link wdr3600_firmware - Yes
Hardware tp-link wdr3600 - No
Operating System tp-link we843n_firmware - Yes
Hardware tp-link we843n - No
Operating System tp-link wr1043nd_firmware - Yes
Hardware tp-link wr1043nd - No
Operating System tp-link wr1045nd_firmware - Yes
Hardware tp-link wr1045nd - No
Operating System tp-link wr740n_firmware - Yes
Hardware tp-link wr740n - No
Operating System tp-link wr741nd_firmware - Yes
Hardware tp-link wr741nd - No
Operating System tp-link wr749n_firmware - Yes
Hardware tp-link wr749n - No
Operating System tp-link wr802n_firmware - Yes
Hardware tp-link wr802n - No
Operating System tp-link wr840n_firmware - Yes
Hardware tp-link wr840n - No
Operating System tp-link wr841hp_firmware - Yes
Hardware tp-link wr841hp - No
Operating System tp-link wr841n_firmware - Yes
Hardware tp-link wr841n - No
Operating System tp-link wr842n_firmware - Yes
Hardware tp-link wr842n - No
Operating System tp-link wr842nd_firmware - Yes
Hardware tp-link wr842nd - No
Operating System tp-link wr845n_firmware - Yes
Hardware tp-link wr845n - No
Operating System tp-link wr940n_firmware - Yes
Hardware tp-link wr940n - No
Operating System tp-link wr941hp_firmware - Yes
Hardware tp-link wr941hp - No
Operating System tp-link wr945n_firmware - Yes
Hardware tp-link wr945n - No
Operating System tp-link wr949n_firmware - Yes
Hardware tp-link wr949n - No
Operating System tp-link wrd4300_firmware - Yes
Hardware tp-link wrd4300 - No
References