9

CVE-2017-15634

Exploit

TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the name variable in the wportal.lua file.

Data is provided by the National Vulnerability Database (NVD)
Tp-link ≫ Er5110g Firmware Version-
   Tp-link ≫ Er5110g Version-
Tp-link ≫ Er5120g Firmware Version-
   Tp-link ≫ Er5120g Version-
Tp-link ≫ Er5510g Firmware Version-
   Tp-link ≫ Er5510g Version-
Tp-link ≫ Er5520g Firmware Version-
   Tp-link ≫ Er5520g Version-
Tp-link ≫ R4149g Firmware Version-
   Tp-link ≫ R4149g Version-
Tp-link ≫ R4239g Firmware Version-
   Tp-link ≫ R4239g Version-
Tp-link ≫ R4299g Firmware Version-
   Tp-link ≫ R4299g Version-
Tp-link ≫ R473gp-ac Firmware Version-
   Tp-link ≫ R473gp-ac Version-
Tp-link ≫ R473g Firmware Version-
   Tp-link ≫ R473g Version-
Tp-link ≫ R473p-ac Firmware Version-
   Tp-link ≫ R473p-ac Version-
Tp-link ≫ R473 Firmware Version-
   Tp-link ≫ R473 Version-
Tp-link ≫ R478g+ Firmware Version-
   Tp-link ≫ R478g+ Version-
Tp-link ≫ R478 Firmware Version-
   Tp-link ≫ R478 Version-
Tp-link ≫ R478+ Firmware Version-
   Tp-link ≫ R478+ Version-
Tp-link ≫ R483g Firmware Version-
   Tp-link ≫ R483g Version-
Tp-link ≫ R483 Firmware Version-
   Tp-link ≫ R483 Version-
Tp-link ≫ R488 Firmware Version-
   Tp-link ≫ R488 Version-
Tp-link ≫ War1300l Firmware Version-
   Tp-link ≫ War1300l Version-
Tp-link ≫ War1750l Firmware Version-
   Tp-link ≫ War1750l Version-
Tp-link ≫ War2600l Firmware Version-
   Tp-link ≫ War2600l Version-
Tp-link ≫ War302 Firmware Version-
   Tp-link ≫ War302 Version-
Tp-link ≫ War450l Firmware Version-
   Tp-link ≫ War450l Version-
Tp-link ≫ War450 Firmware Version-
   Tp-link ≫ War450 Version-
Tp-link ≫ War458l Firmware Version-
   Tp-link ≫ War458l Version-
Tp-link ≫ War458 Firmware Version-
   Tp-link ≫ War458 Version-
Tp-link ≫ War900l Firmware Version-
   Tp-link ≫ War900l Version-
Tp-link ≫ Wvr1300g Firmware Version-
   Tp-link ≫ Wvr1300g Version-
Tp-link ≫ Wvr1300l Firmware Version-
   Tp-link ≫ Wvr1300l Version-
Tp-link ≫ Wvr1750l Firmware Version-
   Tp-link ≫ Wvr1750l Version-
Tp-link ≫ Wvr2600l Firmware Version-
   Tp-link ≫ Wvr2600l Version-
Tp-link ≫ Wvr300 Firmware Version-
   Tp-link ≫ Wvr300 Version-
Tp-link ≫ Wvr302 Firmware Version-
   Tp-link ≫ Wvr302 Version-
Tp-link ≫ Wvr4300l Firmware Version-
   Tp-link ≫ Wvr4300l Version-
Tp-link ≫ Wvr450l Firmware Version1.0161125
   Tp-link ≫ Wvr450l Version-
Tp-link ≫ Wvr450 Firmware Version-
   Tp-link ≫ Wvr450 Version-
Tp-link ≫ Wvr458l Firmware Version-
   Tp-link ≫ Wvr458l Version-
Tp-link ≫ Wvr900g Firmware Version3.0_170306
   Tp-link ≫ Wvr900g Version-
Tp-link ≫ Wvr900l Firmware Version-
   Tp-link ≫ Wvr900l Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.39% 0.795
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.2 1.2 5.9
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 9 8 10
AV:N/AC:L/Au:S/C:C/I:C/A:C
http://www.securityfocus.com/archive/1/541655/100/0/threaded
Third Party Advisory
Exploit
VDB Entry