CVE-2017-15634

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

4.37%

Published

Jan 11, 2018

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the name variable in the wportal.lua file.

Affected Products (76)

tp-link · er5110g_firmwarevulnerable

tp-link · er5110g

tp-link · er5120g_firmwarevulnerable

tp-link · er5120g

tp-link · er5510g_firmwarevulnerable

tp-link · er5510g

tp-link · er5520g_firmwarevulnerable

tp-link · er5520g

References (4)

http://www.securityfocus.com/archive/1/541655/100/0/threaded

ExploitThird Party AdvisoryVDB Entry

https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt

ExploitThird Party Advisory

http://www.securityfocus.com/archive/1/541655/100/0/threaded

ExploitThird Party AdvisoryVDB Entry

https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt

ExploitThird Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs