high8.8
CVE-2017-16960
TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field o…
Impact
TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/interface command to cgi-bin/luci, related to the get_device_byif function in /usr/lib/lua/luci/controller/admin/interface.lua in uhttpd.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tp-Link | Tl-Er5510g | Versions v2, v3 |
| Tp-Link | Tl-Er5520g | Versions v2, v3 |
| Tp-Link | Tl-Er6120g | Version v2 |
| Tp-Link | Tl-Er6520g | Versions v2, v3 |
| Tp-Link | Tl-R4239g | Version v2 |
| Tp-Link | Tl-R4299g | Version v2 |
| Tp-Link | Tl-R473 | Version v5 |
| Tp-Link | Tl-R478 | Version v6 |
| Tp-Link | Tl-R478\+ | Version v7 |
| Tp-Link | Tl-R478g\+ | Version v3 |
| Tp-Link | Tl-R483 | Version v5 |
| Tp-Link | Tl-R483g | Version v2 |