Fixed Intel

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Apr 15, 2022

CVE-2015-3035

High
EPSS 92.9%CISA KEV
TP-Link/Multiple Archer Devices

Description

Directory traversal vulnerability in multiple TP-Link Archer devices allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.

EPSS — Exploit Probability

92.9%

Higher than 99.8% of all CVEs

Required Action

https://nvd.nist.gov/vuln/detail/CVE-2015-3035

Related Articles (1)

Malware & Threats

TP-Link warns users to patch critical router auth bypass flaw

TP-Link has patched several vulnerabilities in its Archer NX router series, including a critical-severity flaw that may allow attackers to bypass authentication and upload new firmware.

Mar 25, 2026

Risk Assessment

HIGH
In CISA KEV
High EPSS

Details

Severity
High
EPSS
92.9%
CISA KEV
Yes
Ransomware
Unknown
Articles
1

Timeline

Published

Mar 25, 2022

Added to KEV

Mar 25, 2022

Remediation Due

Apr 15, 2022

Affected Product

TP-Link

Multiple Archer Devices

View all TP-Link CVEs

External Links

NVD (NIST)CVE DetailsMITRE CVE