Directory Traversal in TP‑Link Archer Devices (CVE‑2015‑3035) Enables Remote File Read
What It Is – A directory‑traversal flaw (CVE‑2015‑3035) in the web‑admin interface of several TP‑Link Archer routers allows an unauthenticated remote attacker to append “..” to the PATH_INFO parameter of the login/ URL and retrieve arbitrary files from the device’s filesystem.
Exploitability – The vulnerability is exploitable over the network without credentials. Public proof‑of‑concept code exists; the CVSS v3.1 base score is 7.5 (High).
Affected Products – TP‑Link Archer series routers (e.g., Archer C7, C9, C1200, and other models listed in the CISA Known Exploited Vulnerabilities catalog).
Why It Matters for Trust & Control Assurance
- Secure Configuration Management – The flaw shows a gap in how firmware enforces file‑system boundaries, a core control objective that maps to multiple frameworks (e.g., NIST CSF Identify > Asset Management, ISO 27001 A.12.1).
- Continuous Evidence of Patch Posture – Demonstrating that all network assets run approved firmware versions is essential for a defensible audit trail and for proving due‑diligence to partners.
- Vendor Oversight – When third‑party hardware is in scope, organizations must verify that vendors provide timely security updates and that those updates are applied, a control that underpins supply‑chain trust.
Recommended Actions
- Inventory – Identify every Archer device on your network and map firmware versions.
- Patch – Apply the latest TP‑Link firmware that addresses CVE‑2015‑3035; verify the patch is successfully installed.
- Validate – Perform a controlled test (e.g., attempt the traversal on a lab copy) to confirm remediation.
- Monitor – Enable continuous configuration monitoring to flag any re‑introduction of vulnerable firmware.
- Document – Capture evidence of the patch process for audit readiness and future third‑party risk assessments.
Source: CISA KEV – CVE‑2015‑3035