CVE-2021-3275: tp-link archer-c3150_firmware Cross-site Scripting
Vulnerability summary
CVE-2021-3275 is a medium (CVSS 6.1) Cross-site Scripting vulnerability in tp-link archer-c3150_firmware. EPSS estimates a 1.79% chance of exploitation in the next 30 days, higher than 78.1% of scored vulnerabilities. 3 public exploits are recorded.
Timeline
- 26-03-2021PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
Unauthenticated stored cross-site scripting (XSS) exists in multiple TP-Link products including WIFI Routers (Wireless AC routers), Access Points, ADSL + DSL Gateways and Routers, which affects TD-W9977v1, TL-WA801NDv5, TL-WA801Nv6, TL-WA802Nv5, and Archer C3150v2 devices through the improper validation of the hostname. Some of the pages including dhcp.htm, networkMap.htm, dhcpClient.htm, qsEdit.htm, and qsReview.htm and use this vulnerable hostname function (setDefaultHostname()) without sanitization.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.79%
Chance of exploitation in the next 30 days
Percentile
78%
Versus all other CVEs
30-day change
0.00 pp
From 1.79% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
3 foundCve
Maturity: poc
Exploit Reference (seclists.org)
Maturity: unknown
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Tp-link5 products
- archer-c3150_firmwarev2_170926
- td-w9977_firmwarev1_0.1.0_0.9.1_up_boot\(161123\)_2016-11-23_15.36.15
- tl-wa801n_firmwarev6_eu_0.9.1_3.16_up_boot\[200116-rel61815\]
- tl-wa801nd_firmwarev5_us_0.9.1_3.16_up_boot\[170905-rel56404\]
- tl-wr802n_firmwarev4_us_0.9.1_3.17_up_boot\[200421-rel38950\]
1 vendor · 5 products
References
4 links- packetstormsecurity.com/files/161989/TP-Link-Cross-Site-Scripting.htmlX Refsource MISCExploitThird Party AdvisoryVDB Entry