CVE-2020-35575: TP-Link Archer c5 Firmware

Critical severity, CVSS 9.8. EPSS: 7.6% chance of exploitation in the next 30 days.

A password-disclosure issue in the web interface on certain TP-Link devices allows a remote attacker to get full administrative access to the web panel. This affects WA901ND devices before 3.16.9(201211) beta, and Archer C5, Archer C7, MR3420, MR6400, WA701ND, WA801ND, WDR3500, WDR3600, WE843N, WR1043ND, WR1045ND, WR740N, WR741ND, WR749N, WR802N, WR840N, WR841HP, WR841N, WR842N, WR842ND, WR845N, WR940N, WR941HP, WR945N, WR949N, and WRD4300 devices.

Affected products

  • TP-Link Archer c5 Firmware: affected versions not specified
  • TP-Link Archer c7 Firmware: affected versions not specified
  • TP-Link MR3420 Firmware: affected versions not specified
  • TP-Link MR6400 Firmware: affected versions not specified
  • TP-Link WA701ND Firmware: affected versions not specified
  • TP-Link WA801ND Firmware: affected versions not specified
  • TP-Link WA901ND Firmware: before 3.16.9\(201211\)_beta (fixed in 3.16.9\(201211\)_beta)
  • TP-Link WDR3500 Firmware: affected versions not specified
  • TP-Link WDR3600 Firmware: affected versions not specified
  • TP-Link WE843N Firmware: affected versions not specified
  • TP-Link WR1043ND Firmware: affected versions not specified
  • TP-Link WR1045ND Firmware: affected versions not specified
  • TP-Link WR740N Firmware: affected versions not specified
  • TP-Link WR741ND Firmware: affected versions not specified
  • TP-Link WR749N Firmware: affected versions not specified
  • TP-Link WR802N Firmware: affected versions not specified
  • TP-Link WR840N Firmware: affected versions not specified
  • TP-Link WR841HP Firmware: affected versions not specified
  • TP-Link WR841N Firmware: affected versions not specified
  • TP-Link WR842N Firmware: affected versions not specified
  • TP-Link WR842ND Firmware: affected versions not specified
  • TP-Link WR845N Firmware: affected versions not specified
  • TP-Link WR940N Firmware: affected versions not specified
  • TP-Link WR941HP Firmware: affected versions not specified
  • TP-Link WR945N Firmware: affected versions not specified
  • and 2 more

Published 2020-12-26. Last modified 2026-06-17.