9

CVE-2017-15621

Exploit

TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the olmode variable in the interface_wan.lua file.

Data is provided by the National Vulnerability Database (NVD)
Tp-link ≫ Er5110g Firmware Version-
   Tp-link ≫ Er5110g Version-
Tp-link ≫ Er5120g Firmware Version-
   Tp-link ≫ Er5120g Version-
Tp-link ≫ Er5510g Firmware Version-
   Tp-link ≫ Er5510g Version-
Tp-link ≫ Er5520g Firmware Version-
   Tp-link ≫ Er5520g Version-
Tp-link ≫ R4149g Firmware Version-
   Tp-link ≫ R4149g Version-
Tp-link ≫ R4239g Firmware Version-
   Tp-link ≫ R4239g Version-
Tp-link ≫ R4299g Firmware Version-
   Tp-link ≫ R4299g Version-
Tp-link ≫ R473gp-ac Firmware Version-
   Tp-link ≫ R473gp-ac Version-
Tp-link ≫ R473g Firmware Version-
   Tp-link ≫ R473g Version-
Tp-link ≫ R473p-ac Firmware Version-
   Tp-link ≫ R473p-ac Version-
Tp-link ≫ R473 Firmware Version-
   Tp-link ≫ R473 Version-
Tp-link ≫ R478g+ Firmware Version-
   Tp-link ≫ R478g+ Version-
Tp-link ≫ R478 Firmware Version-
   Tp-link ≫ R478 Version-
Tp-link ≫ R478+ Firmware Version-
   Tp-link ≫ R478+ Version-
Tp-link ≫ R483g Firmware Version-
   Tp-link ≫ R483g Version-
Tp-link ≫ R483 Firmware Version-
   Tp-link ≫ R483 Version-
Tp-link ≫ R488 Firmware Version-
   Tp-link ≫ R488 Version-
Tp-link ≫ War1300l Firmware Version-
   Tp-link ≫ War1300l Version-
Tp-link ≫ War1750l Firmware Version-
   Tp-link ≫ War1750l Version-
Tp-link ≫ War2600l Firmware Version-
   Tp-link ≫ War2600l Version-
Tp-link ≫ War302 Firmware Version-
   Tp-link ≫ War302 Version-
Tp-link ≫ War450l Firmware Version-
   Tp-link ≫ War450l Version-
Tp-link ≫ War450 Firmware Version-
   Tp-link ≫ War450 Version-
Tp-link ≫ War458l Firmware Version-
   Tp-link ≫ War458l Version-
Tp-link ≫ War458 Firmware Version-
   Tp-link ≫ War458 Version-
Tp-link ≫ War900l Firmware Version-
   Tp-link ≫ War900l Version-
Tp-link ≫ Wvr1300g Firmware Version-
   Tp-link ≫ Wvr1300g Version-
Tp-link ≫ Wvr1300l Firmware Version-
   Tp-link ≫ Wvr1300l Version-
Tp-link ≫ Wvr1750l Firmware Version-
   Tp-link ≫ Wvr1750l Version-
Tp-link ≫ Wvr2600l Firmware Version-
   Tp-link ≫ Wvr2600l Version-
Tp-link ≫ Wvr300 Firmware Version-
   Tp-link ≫ Wvr300 Version-
Tp-link ≫ Wvr302 Firmware Version-
   Tp-link ≫ Wvr302 Version-
Tp-link ≫ Wvr4300l Firmware Version-
   Tp-link ≫ Wvr4300l Version-
Tp-link ≫ Wvr450l Firmware Version1.0161125
   Tp-link ≫ Wvr450l Version-
Tp-link ≫ Wvr450 Firmware Version-
   Tp-link ≫ Wvr450 Version-
Tp-link ≫ Wvr458l Firmware Version-
   Tp-link ≫ Wvr458l Version-
Tp-link ≫ Wvr900g Firmware Version3.0_170306
   Tp-link ≫ Wvr900g Version-
Tp-link ≫ Wvr900l Firmware Version-
   Tp-link ≫ Wvr900l Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.39% 0.795
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.2 1.2 5.9
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 9 8 10
AV:N/AC:L/Au:S/C:C/I:C/A:C
http://www.securityfocus.com/archive/1/541655/100/0/threaded
Third Party Advisory
Exploit
VDB Entry