Tp-link

Tl-wvr450l Firmware

6 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9

CVE-2017-17757

Exploit
  • EPSS 1.28%
  • Published 19.12.2017 07:29:00
  • Last modified 20.04.2025 01:37:25

TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the interface field of an admin/wportal command to cgi-bin/luci, related to the get_device_byif function in /usr/lib/lua/luci...

9

CVE-2017-17758

Exploit
  • EPSS 1.28%
  • Published 19.12.2017 07:29:00
  • Last modified 20.04.2025 01:37:25

TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the interface field of an admin/dhcps command to cgi-bin/luci, related to the zone_get_iface_bydev function in /usr/lib/lua/l...

9

CVE-2017-16957

Exploit
  • EPSS 2.89%
  • Published 27.11.2017 10:29:00
  • Last modified 20.04.2025 01:37:25

TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the iface field of an admin/diagnostic command to cgi-bin/luci, related to the zone_get_effect_devices function...

9

CVE-2017-16958

Exploit
  • EPSS 1.37%
  • Published 27.11.2017 10:29:00
  • Last modified 20.04.2025 01:37:25

TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/bridge command to cgi-bin/luci, related to the get_device_byif function in /usr/...

6.5

CVE-2017-16959

Exploit
  • EPSS 0.38%
  • Published 27.11.2017 10:29:00
  • Last modified 20.04.2025 01:37:25

The locale feature in cgi-bin/luci on TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allows remote authenticated users to test for the existence of arbitrary files by making an operation=write;locale=%0d request, and then making an operation=read re...

9

CVE-2017-16960

  • EPSS 0.86%
  • Published 27.11.2017 10:29:00
  • Last modified 20.04.2025 01:37:25

TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/interface command to cgi-bin/luci, related to the get_device_byif function in /u...