Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

CVE-2017-16960

TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/interface command to cgi-bin/luci, related to the get_device_byif function in /usr/lib/lua/luci/controller/admin/interface.lua in uhttpd.

CVSS 3.0 · 8.8 High EPSS 2.4% KEV · Not listed
Vendors
Tp-link
Products
Tl-er3210g Tl-er3210g Firmware Tl-er3220g and 90 more
CVE-2017-17757

TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the interface field of an admin/wportal command to cgi-bin/luci, related to the get_device_byif function in /usr/lib/lua/luci/controller/admin/wportal.lua in uhttpd.

CVSS 3.0 · 8.8 High EPSS 2.7% KEV · Not listed
Vendors
Tp-link
Products
Tl-war1200l Tl-war1200l Firmware Tl-war1300l and 27 more
CVE-2017-17758

TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the interface field of an admin/dhcps command to cgi-bin/luci, related to the zone_get_iface_bydev function in /usr/lib/lua/luci/controller/admin/dhcps.lua in uhttpd.

CVSS 3.0 · 8.8 High EPSS 2.6% KEV · Not listed
Vendors
Tp-link
Products
Tl-war1200l Tl-war1200l Firmware Tl-war1300l and 27 more