Hardwarev1
Beta build · 10-13-2026-r66345
Browse firmware downloadsdownload1.dd-wrt.comRouter
Hardwarev1
Beta build · 10-13-2026-r66345
Browse firmware downloadsdownload1.dd-wrt.comReplace router software with a customizable system for network controls and community packages.
Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.
Check the project and hardware shown for each feature.
tp-link tl-wdr3500 v1 — device documentation (github.com)Device details — v1 — Source documentation (openwrt.org)
TP-LINK TL-WDR3500 — TechInfoDepot (github.com)TP-LINK TL-WDR3500 — WikiDevi (github.com)
tp-link tl-wdr3500 v1 — device documentation (github.com)TP-LINK TL-WDR3500 — TechInfoDepot (github.com)TP-LINK TL-WDR3500 — WikiDevi (github.com)Documented hardware — v1 — Source documentation (openwrt.org)
Saved scan
From our saved security research.
Prioritized by known exploitation, severity, then date.
TP-LINK TL-WDR3500
Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (1.0), TL-WDR3600 (1.0), and TL-WDR4300 (1.0) with firmware before 150302, TL-WR740N (5.0) and TL-WR741ND (5.0) with firmware before 150312, and TL-WR841N (9.0), TL-WR841N (10.0), TL-WR841ND (9.0), and TL-WR841ND (10.0) with firmware before 150310 allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.
TL-WDR3500
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.