CVE-2012-5687 is a directory traversal vulnerability affecting TP-LINK TL-WR841N routers with firmware 3.13.9 build 120201 Rel.54965n and earlier. This flaw allows unauthenticated remote attackers to read arbitrary files on the device by manipulating the PATH_INFO in requests to the /help/ URI. With a CVSS score of 7.8, it is considered highly severe due to its network-based attack vector and complete confidentiality impact. While not listed in CISA's KEV catalog, a Metasploit module exists for exploitation, and its EPSS score indicates a high likelihood of exploitation. Despite this, there is no recorded community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:h:tp-link:tl-wr841n:-:*:*:*:*:*:*:* | ||
<= 3.13.9CPE matchmatch criteria | cpe:2.3:o:tp-link:tl-wr841n_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:C/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.