9

CVE-2017-15629

Exploit
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-tunnelname variable in the pptp_client.lua file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Tp-link ≫ Er5110g Firmware Version -
   Tp-link ≫ Er5110g Version -
Tp-link ≫ Er5120g Firmware Version -
   Tp-link ≫ Er5120g Version -
Tp-link ≫ Er5510g Firmware Version -
   Tp-link ≫ Er5510g Version -
Tp-link ≫ Er5520g Firmware Version -
   Tp-link ≫ Er5520g Version -
Tp-link ≫ R4149g Firmware Version -
   Tp-link ≫ R4149g Version -
Tp-link ≫ R4239g Firmware Version -
   Tp-link ≫ R4239g Version -
Tp-link ≫ R4299g Firmware Version -
   Tp-link ≫ R4299g Version -
Tp-link ≫ R473gp-ac Firmware Version -
   Tp-link ≫ R473gp-ac Version -
Tp-link ≫ R473g Firmware Version -
   Tp-link ≫ R473g Version -
Tp-link ≫ R473p-ac Firmware Version -
   Tp-link ≫ R473p-ac Version -
Tp-link ≫ R473 Firmware Version -
   Tp-link ≫ R473 Version -
Tp-link ≫ R478g+ Firmware Version -
   Tp-link ≫ R478g+ Version -
Tp-link ≫ R478 Firmware Version -
   Tp-link ≫ R478 Version -
Tp-link ≫ R478+ Firmware Version -
   Tp-link ≫ R478+ Version -
Tp-link ≫ R483g Firmware Version -
   Tp-link ≫ R483g Version -
Tp-link ≫ R483 Firmware Version -
   Tp-link ≫ R483 Version -
Tp-link ≫ R488 Firmware Version -
   Tp-link ≫ R488 Version -
Tp-link ≫ War1300l Firmware Version -
   Tp-link ≫ War1300l Version -
Tp-link ≫ War1750l Firmware Version -
   Tp-link ≫ War1750l Version -
Tp-link ≫ War2600l Firmware Version -
   Tp-link ≫ War2600l Version -
Tp-link ≫ War302 Firmware Version -
   Tp-link ≫ War302 Version -
Tp-link ≫ War450l Firmware Version -
   Tp-link ≫ War450l Version -
Tp-link ≫ War450 Firmware Version -
   Tp-link ≫ War450 Version -
Tp-link ≫ War458l Firmware Version -
   Tp-link ≫ War458l Version -
Tp-link ≫ War458 Firmware Version -
   Tp-link ≫ War458 Version -
Tp-link ≫ War900l Firmware Version -
   Tp-link ≫ War900l Version -
Tp-link ≫ Wvr1300g Firmware Version -
   Tp-link ≫ Wvr1300g Version -
Tp-link ≫ Wvr1300l Firmware Version -
   Tp-link ≫ Wvr1300l Version -
Tp-link ≫ Wvr1750l Firmware Version -
   Tp-link ≫ Wvr1750l Version -
Tp-link ≫ Wvr2600l Firmware Version -
   Tp-link ≫ Wvr2600l Version -
Tp-link ≫ Wvr300 Firmware Version -
   Tp-link ≫ Wvr300 Version -
Tp-link ≫ Wvr302 Firmware Version -
   Tp-link ≫ Wvr302 Version -
Tp-link ≫ Wvr4300l Firmware Version -
   Tp-link ≫ Wvr4300l Version -
Tp-link ≫ Wvr450l Firmware Version 1.0161125
   Tp-link ≫ Wvr450l Version -
Tp-link ≫ Wvr450 Firmware Version -
   Tp-link ≫ Wvr450 Version -
Tp-link ≫ Wvr458l Firmware Version -
   Tp-link ≫ Wvr458l Version -
Tp-link ≫ Wvr900g Firmware Version 3.0_170306
   Tp-link ≫ Wvr900g Version -
Tp-link ≫ Wvr900l Firmware Version -
   Tp-link ≫ Wvr900l Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.37% 0.9
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.2 1.2 5.9
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NIST 9 8 10
AV:N/AC:L/Au:S/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securityfocus.com/archive/1/541655/100/0/threaded
Third Party Advisory
Exploit
VDB Entry
https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt
Third Party Advisory
Exploit