CVEvulnerability

CVE-2020-35575

9.8 CRITICAL Published 2020-12-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-12-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

A password-disclosure issue in the web interface on certain TP-Link devices allows a remote attacker to get full administrative access to the web panel. This affects WA901ND devices before 3.16.9(201211) beta, and Archer C5, Archer C7, MR3420, MR6400, WA701ND, WA801ND, WDR3500, WDR3600, WE843N, WR1043ND, WR1045ND, WR740N, WR741ND, WR749N, WR802N, WR840N, WR841HP, WR841N, WR842N, WR842ND, WR845N, WR940N, WR941HP, WR945N, WR949N, and WRD4300 devices.

Affected configurations

• tp-link wa901nd firmware (< 3.16.9\(201211\) beta) • tp-link archer c5 firmware • tp-link archer c7 firmware • tp-link mr3420 firmware • tp-link mr6400 firmware • tp-link wa701nd firmware • tp-link wa801nd firmware • tp-link wdr3500 firmware • tp-link wdr3600 firmware • tp-link we843n firmware • tp-link wr1043nd firmware • tp-link wr1045nd firmware • tp-link wr740n firmware • tp-link wr741nd firmware • tp-link wr749n firmware • tp-link wr802n firmware • tp-link wr840n firmware • tp-link wr841hp firmware • tp-link wr841n firmware • tp-link wr842n firmware • tp-link wr842nd firmware • tp-link wr845n firmware • tp-link wr940n firmware • tp-link wr941hp firmware • tp-link wr945n firmware • tp-link wr949n firmware • tp-link wrd4300 firmware

References