Exploitation Summary
EIP tracks 2 public exploits for CVE-2012-5687.
Includes Metasploit module auxiliary/scanner/http/tplink_traversal_noauth.
AI-analyzed exploit summary This advisory details multiple vulnerabilities in TP-Link TL-WA701N/ND devices, including directory traversal (CVE-2012-5687), stored XSS, and weak password change mechanisms. It provides technical details, example HTTP requests, and references to prior research.
Description
Directory traversal vulnerability in the web-based management feature on the TP-LINK TL-WR841N router with firmware 3.13.9 build 120201 Rel.54965n and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to the help/ URI.
Exploits (2)
This advisory details multiple vulnerabilities in TP-Link TL-WA701N/ND devices, including directory traversal (CVE-2012-5687), stored XSS, and weak password change mechanisms. It provides technical details, example HTTP requests, and references to prior research.
This Metasploit module exploits a directory traversal vulnerability in TP-Link Wireless Lite N Access Point 3.12.16 Build 120228 Rel.37317n, allowing unauthorized access to sensitive files via crafted HTTP GET requests.