high8.8
CVE-2017-16958
TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field o…
Impact
TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/bridge command to cgi-bin/luci, related to the get_device_byif function in /usr/lib/lua/luci/controller/admin/bridge.lua in uhttpd.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tp-Link | Tl-Wvr300 Firmware | All versions |
| Tp-Link | Tl-Wvr302 Firmware | All versions |
| Tp-Link | Tl-Wvr450 Firmware | All versions |
| Tp-Link | Tl-Wvr450l Firmware | All versions |
| Tp-Link | Tl-Wvr450g Firmware | All versions |
| Tp-Link | Tl-Wvr458 Firmware | All versions |
| Tp-Link | Tl-Wvr458l Firmware | All versions |
| Tp-Link | Tl-Wvr458p Firmware | All versions |
| Tp-Link | Tl-Wvr900g Firmware | All versions |
| Tp-Link | Tl-Wvr900l Firmware | All versions |
| Tp-Link | Tl-Wvr1200l Firmware | All versions |
| Tp-Link | Tl-Wvr1300l Firmware | All versions |