CVE-2020-35575

A password-disclosure issue in the web interface on certain TP-Link devices allows a remote attacker to get full administrative access to the web panel. This affects WA901ND devices before 3.16.9(201211) beta, and Archer C5, Archer C7, MR3420, MR6400, WA701ND, WA801ND, WDR3500, WDR3600, WE843N, WR1043ND, WR1045ND, WR740N, WR741ND, WR749N, WR802N, WR840N, WR841HP, WR841N, WR842N, WR842ND, WR845N, WR940N, WR941HP, WR945N, WR949N, and WRD4300 devices.

• http://packetstormsecurity.com/files/163274/TP-Link-TL-WR841N-Command-Injection.htmlExploit, Third Party Advisory, VDB Entry
• https://pastebin.com/F8AuUdckThird Party Advisory
• https://static.tp-link.com/2020/202012/20201214/wa901ndv5_eu_3_16_9_up_boot%28201211%29.zip
• https://www.tp-link.com/us/securityVendor Advisory
• http://packetstormsecurity.com/files/163274/TP-Link-TL-WR841N-Command-Injection.htmlExploit, Third Party Advisory, VDB Entry
• https://pastebin.com/F8AuUdckThird Party Advisory
• https://static.tp-link.com/2020/202012/20201214/wa901ndv5_eu_3_16_9_up_boot%28201211%29.zip
• https://www.tp-link.com/us/securityVendor Advisory

Published

Dec 26, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-35569An issue was discovered in MB CONNECT LINE mymbCONNECT24 and…6.1
• CVE-2020-3557A vulnerability in the host input API daemon of Cisco Firepo…5.3
• CVE-2020-35570An issue was discovered in MB connect line mymbCONNECT24, mb…5.3
• CVE-2020-35571An issue was discovered in MantisBT through 2.24.3. In the h…6.1
• CVE-2020-35572Adminer through 4.7.8 allows XSS via the history parameter t…6.1
• CVE-2020-35573srs2.c in PostSRSd before 1.10 allows remote attackers to ca…7.5
• CVE-2020-35576A Command Injection issue in the traceroute feature on TP-Li…8.8
• CVE-2020-35577In Endalia Selection Portal before 4.205.0, an Insecure Dire…6.5
• CVE-2020-35578An issue was discovered in the Manage Plugins page in Nagios…7.2
• CVE-2020-35579tindy2013 subconverter 0.6.4 has a /sub?target=%TARGET%&url=…7.5
• CVE-2020-3558A vulnerability in the web-based management interface of Cis…6.1
• CVE-2020-35580A local file inclusion vulnerability in the FileServlet in a…7.5