PT-2020-17349 · Tp Link · Wa701Nd+25

Published 2020-12-26 · Updated 2021-09-07 · CVE-2020-35575

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TP-Link WA901ND version 3.16.9(201211) beta and earlier TP-Link Archer C5 (affected versions not specified) TP-Link Archer C7 (affected versions not specified) TP-Link MR3420 (affected versions not specified) TP-Link MR6400 (affected versions not specified) TP-Link WA701ND (affected versions not specified) TP-Link WA801ND (affected versions not specified) TP-Link WDR3500 (affected versions not specified) TP-Link WDR3600 (affected versions not specified) TP-Link WE843N (affected versions not specified) TP-Link WR1043ND (affected versions not specified) TP-Link WR1045ND (affected versions not specified) TP-Link WR740N (affected versions not specified) TP-Link WR741ND (affected versions not specified) TP-Link WR749N (affected versions not specified) TP-Link WR802N (affected versions not specified) TP-Link WR840N (affected versions not specified) TP-Link WR841HP (affected versions not specified) TP-Link WR841N (affected versions not specified) TP-Link WR842N (affected versions not specified) TP-Link WR842ND (affected versions not specified) TP-Link WR845N (affected versions not specified) TP-Link WR940N (affected versions not specified) TP-Link WR941HP (affected versions not specified) TP-Link WR945N (affected versions not specified) TP-Link WR949N (affected versions not specified) TP-Link WRD4300 (affected versions not specified)

Description A password-disclosure issue in the web interface on certain TP-Link devices allows a remote attacker to get full administrative access to the web panel.

Recommendations For TP-Link WA901ND version 3.16.9(201211) beta and earlier, update to version 3.16.9(201211) beta or later. For other affected devices, at the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the web interface to minimize the risk of exploitation.

Exploit

Related Identifiers

CVE-2020-35575

Affected Products

Archer C5

Archer C7

Mr3420

Mr6400

Wa701Nd

Wa801Nd

Wa901Nd

Wdr3500

Wdr3600

We843N

Wr1043Nd

Wr1045Nd

Wr740N

Wr741Nd

Wr749N

Wr802N

Wr840N

Wr841Hp

Wr841N

Wr842N

Wr845N

Wr940N

Wr941Hp

Wr945N

Wr949N

Wrd4300

References · 8

• 🔥 http://packetstormsecurity.com/files/163274/TP-Link-TL-WR841N-Command-Injection.html · Exploit
• https://osv.dev/vulnerability/CVE-2020-35575 · Vendor Advisory
• https://tp-link.com/us/security · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-35575 · Security Note
• https://pastebin.com/F8AuUdck · Note
• https://t.me/cvenotify/7747 · Telegram Post
• https://static.tp-link.com/2020/202012/20201214/wa901ndv5_eu_3_16_9_up_boot%28201211%29.zip · Note
• https://t.me/cibsecurity/21322 · Telegram Post