What is CVE-2020-35576?

CVE-2020-35576 is a vulnerability in N/a. Published 2021-01-25.

Is CVE-2020-35576 known to be exploited?

13 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in N/a

CVE-2020-35576

A Command Injection issue in the traceroute feature on TP-Link TL-WR841N V13 (JP) with firmware versions prior to 201216 allows authenticated users to execute arbitrary code as root via shell metacharacters, a different vulnerability than…

EPSS: 0.712 (98.7th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

Public proof-of-concept exploits

0day404/vulnerability-poc
ARPSyndicate/cve-scores
ARPSyndicate/cvemon
EdgeSecurityTeam/Vulnerability
J1ezds/Vulnerability-Wiki-page
KayCHENvip/vulnerability-poc
Live-Hack-CVE/CVE-2020-35576
TesterCC/exp_
Threekiii/Awesome-POC
XiaomingX/awesome-poc-for-red-team

References

www.tp-link.com/us/security
jvn.jp/en/vu/JVNVU92444096/
www.tp-link.com/jp/support/download/tl-wr841n/v13/

Frequently asked questions

What is CVE-2020-35576?: CVE-2020-35576 is a vulnerability in N/a. Published 2021-01-25.
Is CVE-2020-35576 known to be exploited?: 13 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.