What is CVE-2012-5687?

CVE-2012-5687 is a vulnerability in TP-Link Tl-Wr841n, classified under Path Traversal. Published 2012-11-01.

Is CVE-2012-5687 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Path Traversal in TP-Link Tl-Wr841n

CVE-2012-5687

Directory traversal vulnerability in the web-based management feature on the TP-LINK TL-WR841N router with firmware 3.13.9 build 120201 Rel.54965n and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to the help/ URI.

Vulnerability class: Path Traversal (Directory Traversal)

Published 2012-11-01 · last modified 2026-06-16.

CVSS v2 metric

CVSS v2 base score 7.8 (High). Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.

EPSS exploit prediction

EPSS: 0.687 (99.3th percentile), scored 2026-10-18.

High probability of exploitation in the next 30 days — patch promptly. 99th percentile — 99.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.687 · newest: 0.687 · change: 0.000

Affected products

Weakness classification (CWE)

CWE-22 — Path Traversal

Public proof-of-concept exploits

rapid7/metasploit-framework

References

packetstormsecurity.org/files/117749/TP-LINK-TL-WR841N-Local-File-Inclusion.html
archives.neohapsis.com/archives/bugtraq/2012-10/0154.html (mailing-list, Exploit)
exchange.xforce.ibmcloud.com/vulnerabilities/79662 (vdb-entry)

Frequently asked questions

What is CVE-2012-5687?: CVE-2012-5687 is a vulnerability in TP-Link Tl-Wr841n, classified under Path Traversal. Published 2012-11-01.
Is CVE-2012-5687 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.