9

CVE-2017-16960

TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/interface command to cgi-bin/luci, related to the get_device_byif function in /usr/lib/lua/luci/controller/admin/interface.lua in uhttpd.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Tp-link ≫ Tl-er5510g Version v2
Tp-link ≫ Tl-er5510g Version v3
Tp-link ≫ Tl-er5520g Version v2
Tp-link ≫ Tl-er5520g Version v3
Tp-link ≫ Tl-er6120g Version v2
Tp-link ≫ Tl-er6520g Version v2
Tp-link ≫ Tl-er6520g Version v3
Tp-link ≫ Tl-r4239g Version v2
Tp-link ≫ Tl-r4299g Version v2
Tp-link ≫ Tl-r473 Version v5
Tp-link ≫ Tl-r478 Version v6
Tp-link ≫ Tl-r483 Version v5
Tp-link ≫ Tl-r483g Version v2
Tp-link ≫ Tl-r488 Version v5
Tp-link ≫ Tl-wvr300 Version v4
Tp-link ≫ Tl-wvr302 Version v2
Tp-link ≫ Tl-wvr450g Version v5
Tp-link ≫ Tl-wvr900g Version v3
Tp-link ≫ Tl-wvr450 Firmware Version -
   Tp-link ≫ Tl-wvr450 Version -
Tp-link ≫ Tl-wvr450l Firmware Version -
   Tp-link ≫ Tl-wvr450l Version -
Tp-link ≫ Tl-wvr458 Firmware Version -
   Tp-link ≫ Tl-wvr458 Version -
Tp-link ≫ Tl-wvr458l Firmware Version -
   Tp-link ≫ Tl-wvr458l Version -
Tp-link ≫ Tl-wvr458p Firmware Version -
   Tp-link ≫ Tl-wvr458p
Tp-link ≫ Tl-wvr900l Firmware Version -
   Tp-link ≫ Tl-wvr900l Version -
Tp-link ≫ Tl-wvr1200l Firmware Version -
   Tp-link ≫ Tl-wvr1200l Version -
Tp-link ≫ Tl-wvr1300l Firmware Version -
   Tp-link ≫ Tl-wvr1300l Version -
Tp-link ≫ Tl-wvr1300g Firmware Version -
   Tp-link ≫ Tl-wvr1300g Version -
Tp-link ≫ Tl-wvr1750l Firmware Version -
   Tp-link ≫ Tl-wvr1750l Version -
Tp-link ≫ Tl-wvr2600l Firmware Version -
   Tp-link ≫ Tl-wvr2600l Version -
Tp-link ≫ Tl-wvr4300l Firmware Version -
   Tp-link ≫ Tl-wvr4300l Version -
Tp-link ≫ Tl-war302 Firmware Version -
   Tp-link ≫ Tl-war302 Version -
Tp-link ≫ Tl-war450 Firmware Version -
   Tp-link ≫ Tl-war450 Version -
Tp-link ≫ Tl-war450l Firmware Version -
   Tp-link ≫ Tl-war450l Version -
Tp-link ≫ Tl-war458 Firmware Version -
   Tp-link ≫ Tl-war458 Version -
Tp-link ≫ Tl-war458l Firmware Version -
   Tp-link ≫ Tl-war458l Version -
Tp-link ≫ Tl-war900l Firmware Version -
   Tp-link ≫ Tl-war900l Version -
Tp-link ≫ Tl-war1200l Firmware Version -
   Tp-link ≫ Tl-war1200l Version -
Tp-link ≫ Tl-war1300l Firmware Version -
   Tp-link ≫ Tl-war1300l Version -
Tp-link ≫ Tl-war1750l Firmware Version -
   Tp-link ≫ Tl-war1750l Version -
Tp-link ≫ Tl-war2600l Firmware Version -
   Tp-link ≫ Tl-war2600l Version -
Tp-link ≫ Tl-er3210g Firmware Version -
   Tp-link ≫ Tl-er3210g Version -
Tp-link ≫ Tl-er3220g Firmware
   Tp-link ≫ Tl-er3220g Version -
Tp-link ≫ Tl-er5110g Firmware Version -
   Tp-link ≫ Tl-er5110g Version -
Tp-link ≫ Tl-er5120g Firmware Version -
   Tp-link ≫ Tl-er5120g Version -
Tp-link ≫ Tl-er6110g Firmware Version -
   Tp-link ≫ Tl-er6110g Version -
Tp-link ≫ Tl-er6220g Firmware Version -
   Tp-link ≫ Tl-er6220g Version -
Tp-link ≫ Tl-er6510g Firmware Version -
   Tp-link ≫ Tl-er6510g Version -
Tp-link ≫ Tl-er7520g Firmware Version -
   Tp-link ≫ Tl-er7520g Version -
Tp-link ≫ Tl-r473g Firmware Version -
   Tp-link ≫ Tl-r473g Version -
Tp-link ≫ Tl-r473p-ac Firmware Version -
   Tp-link ≫ Tl-r473p-ac Version -
Tp-link ≫ Tl-r473gp-ac Firmware Version -
   Tp-link ≫ Tl-r473gp-ac Version -
Tp-link ≫ Tl-r478g Firmware Version -
   Tp-link ≫ Tl-r478g Version -
Tp-link ≫ Tl-r478g Firmware Version -
   Tp-link ≫ Tl-r478g Version -
Tp-link ≫ Tl-r479p-ac Firmware Version -
   Tp-link ≫ Tl-r479p-ac Version -
Tp-link ≫ Tl-r479gp-ac Firmware Version -
   Tp-link ≫ Tl-r479gp-ac Version -
Tp-link ≫ Tl-r479gpe-ac Firmware Version -
   Tp-link ≫ Tl-r479gpe-ac Version -
Tp-link ≫ Tl-r4149g Firmware Version -
   Tp-link ≫ Tl-r4149g Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.36% 0.816
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 9 8 10
AV:N/AC:L/Au:S/C:C/I:C/A:C
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

https://github.com/coincoin7/Wireless-Router-Vulnerability/blob/master/TplinkInterfaceAuthenticatedRCE.txt
Issue Tracking