high8.8
CVE-2017-16957
TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the iface field of a…
Impact
TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the iface field of an admin/diagnostic command to cgi-bin/luci, related to the zone_get_effect_devices function in /usr/lib/lua/luci/controller/admin/diagnostic.lua in uhttpd.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tp-Link | Tl-Wvr300 Firmware | All versions |
| Tp-Link | Tl-Wvr302 Firmware | All versions |
| Tp-Link | Tl-Wvr450 Firmware | All versions |
| Tp-Link | Tl-Wvr450l Firmware | All versions |
| Tp-Link | Tl-Wvr450g Firmware | All versions |
| Tp-Link | Tl-Wvr458 Firmware | All versions |
| Tp-Link | Tl-Wvr458l Firmware | All versions |
| Tp-Link | Tl-Wvr458p Firmware | All versions |
| Tp-Link | Tl-Wvr900g Firmware | All versions |
| Tp-Link | Tl-Wvr900l Firmware | All versions |
| Tp-Link | Tl-Wvr1200l Firmware | All versions |
| Tp-Link | Tl-Wvr1300l Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/101968
- https://github.com/coincoin7/Wireless-Router-Vulnerability/blob/master/TplinkDiagnosticAuthenticatedRCE.txt
- http://www.securityfocus.com/bid/101968
- https://github.com/coincoin7/Wireless-Router-Vulnerability/blob/master/TplinkDiagnosticAuthenticatedRCE.txt