{
    "id": "CVE-2020-35575",
    "published": "2020-12-26 02:15:12",
    "last_modified": "2026-06-17 03:13:57",
    "cvss_score": "9.8",
    "cvss_severity": "CRITICAL",
    "cvss_version": "3.1",
    "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
    "cwe": null,
    "description": "A password-disclosure issue in the web interface on certain TP-Link devices allows a remote attacker to get full administrative access to the web panel. This affects WA901ND devices before 3.16.9(201211) beta, and Archer C5, Archer C7, MR3420, MR6400, WA701ND, WA801ND, WDR3500, WDR3600, WE843N, WR1043ND, WR1045ND, WR740N, WR741ND, WR749N, WR802N, WR840N, WR841HP, WR841N, WR842N, WR842ND, WR845N, WR940N, WR941HP, WR945N, WR949N, and WRD4300 devices.",
    "epss_score": "0.07643",
    "epss_percentile": "0.94404",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 0,
    "updated_at": "2026-10-05 18:17:23",
    "priority": {
        "rank": 3,
        "label": "In your normal cycle",
        "why": "Critical by CVSS (9.8), but no sign of active exploitation."
    },
    "products": [
        {
            "vendor": "tp-link",
            "product": "archer_c5"
        },
        {
            "vendor": "tp-link",
            "product": "archer_c5_firmware"
        },
        {
            "vendor": "tp-link",
            "product": "archer_c7"
        },
        {
            "vendor": "tp-link",
            "product": "archer_c7_firmware"
        },
        {
            "vendor": "tp-link",
            "product": "mr3420"
        },
        {
            "vendor": "tp-link",
            "product": "mr3420_firmware"
        },
        {
            "vendor": "tp-link",
            "product": "mr6400"
        },
        {
            "vendor": "tp-link",
            "product": "mr6400_firmware"
        },
        {
            "vendor": "tp-link",
            "product": "wa701nd"
        },
        {
            "vendor": "tp-link",
            "product": "wa701nd_firmware"
        },
        {
            "vendor": "tp-link",
            "product": "wa801nd"
        },
        {
            "vendor": "tp-link",
            "product": "wa801nd_firmware"
        },
        {
            "vendor": "tp-link",
            "product": "wa901nd"
        },
        {
            "vendor": "tp-link",
            "product": "wa901nd_firmware"
        },
        {
            "vendor": "tp-link",
            "product": "wdr3500"
        },
        {
            "vendor": "tp-link",
            "product": "wdr3500_firmware"
        },
        {
            "vendor": "tp-link",
            "product": "wdr3600"
        },
        {
            "vendor": "tp-link",
            "product": "wdr3600_firmware"
        },
        {
            "vendor": "tp-link",
            "product": "we843n"
        },
        {
            "vendor": "tp-link",
            "product": "we843n_firmware"
        },
        {
            "vendor": "tp-link",
            "product": "wr1043nd"
        },
        {
            "vendor": "tp-link",
            "product": "wr1043nd_firmware"
        },
        {
            "vendor": "tp-link",
            "product": "wr1045nd"
        },
        {
            "vendor": "tp-link",
            "product": "wr1045nd_firmware"
        },
        {
            "vendor": "tp-link",
            "product": "wr740n"
        },
        {
            "vendor": "tp-link",
            "product": "wr740n_firmware"
        },
        {
            "vendor": "tp-link",
            "product": "wr741nd"
        },
        {
            "vendor": "tp-link",
            "product": "wr741nd_firmware"
        },
        {
            "vendor": "tp-link",
            "product": "wr749n"
        },
        {
            "vendor": "tp-link",
            "product": "wr749n_firmware"
        },
        {
            "vendor": "tp-link",
            "product": "wr802n"
        },
        {
            "vendor": "tp-link",
            "product": "wr802n_firmware"
        },
        {
            "vendor": "tp-link",
            "product": "wr840n"
        },
        {
            "vendor": "tp-link",
            "product": "wr840n_firmware"
        },
        {
            "vendor": "tp-link",
            "product": "wr841hp"
        },
        {
            "vendor": "tp-link",
            "product": "wr841hp_firmware"
        },
        {
            "vendor": "tp-link",
            "product": "wr841n"
        },
        {
            "vendor": "tp-link",
            "product": "wr841n_firmware"
        },
        {
            "vendor": "tp-link",
            "product": "wr842n"
        },
        {
            "vendor": "tp-link",
            "product": "wr842n_firmware"
        }
    ],
    "kev_detail": null,
    "exploits": [],
    "refs_list": [
        "http://packetstormsecurity.com/files/163274/TP-Link-TL-WR841N-Command-Injection.html",
        "https://pastebin.com/F8AuUdck",
        "https://static.tp-link.com/2020/202012/20201214/wa901ndv5_eu_3_16_9_up_boot%28201211%29.zip",
        "https://www.tp-link.com/us/security",
        "http://packetstormsecurity.com/files/163274/TP-Link-TL-WR841N-Command-Injection.html",
        "https://pastebin.com/F8AuUdck",
        "https://static.tp-link.com/2020/202012/20201214/wa901ndv5_eu_3_16_9_up_boot%28201211%29.zip",
        "https://www.tp-link.com/us/security"
    ]
}