High severity8.8NVD Advisory· Published Jan 26, 2021· Updated Jun 17, 2026

CVE-2020-35576

Description

A Command Injection issue in the traceroute feature on TP-Link TL-WR841N V13 (JP) with firmware versions prior to 201216 allows authenticated users to execute arbitrary code as root via shell metacharacters, a different vulnerability than CVE-2018-12577.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

TP-Link/Tl Wr841n2 versions
cpe:2.3:o:tp-link:tl-wr841n_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:tp-link:tl-wr841n_firmware:*:*:*:*:*:*:*:*range: <201216
- (no CPE)range: <201216
TP-Link/TL-WR841Ndescription

Patches

Vulnerability mechanics

References

jvn.jp/en/vu/JVNVU92444096/nvdPatchThird Party Advisory
www.tp-link.com/jp/support/download/tl-wr841n/v13/nvdPatchVendor Advisory
www.tp-link.com/us/securitynvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.034
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000