Lucene search

MitreCVE-2017-15625

HistoryJan 11, 2018 - 4:29 p.m.

CVE-2017-15625

2018-01-1116:29:00

mitre

web.nvd.nist.gov

cve-2017-15625

tp-link

wvr

war

remote authenticated administrators

command injection

pptp_client.lua

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

50.0%

JSON

TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-olmode variable in the pptp_client.lua file.

Affected configurations

Nvd

Node

tp-linker5110g_firmwareMatch-

AND

tp-linker5110gMatch-

Node

tp-linker5120g_firmwareMatch-

AND

tp-linker5120gMatch-

Node

tp-linker5510g_firmwareMatch-

AND

tp-linker5510gMatch-

Node

tp-linker5520g_firmwareMatch-

AND

tp-linker5520gMatch-

Node

tp-linkr4149g_firmwareMatch-

AND

tp-linkr4149gMatch-

Node

tp-linkr4239g_firmwareMatch-

AND

tp-linkr4239gMatch-

Node

tp-linkr4299g_firmwareMatch-

AND

tp-linkr4299gMatch-

Node

tp-linkr473gp-ac_firmwareMatch-

AND

tp-linkr473gp-acMatch-

Node

tp-linkr473g_firmwareMatch-

AND

tp-linkr473gMatch-

Node

tp-linkr473p-ac_firmwareMatch-

AND

tp-linkr473p-acMatch-

Node

tp-linkr473_firmwareMatch-

AND

tp-linkr473Match-

Node

tp-linkr478g\+_firmwareMatch-

AND

tp-linkr478g\+Match-

Node

tp-linkr478_firmwareMatch-

AND

tp-linkr478Match-

Node

tp-linkr478\+_firmwareMatch-

AND

tp-linkr478\+Match-

Node

tp-linkr483g_firmwareMatch-

AND

tp-linkr483gMatch-

Node

tp-linkr483_firmwareMatch-

AND

tp-linkr483Match-

Node

tp-linkr488_firmwareMatch-

AND

tp-linkr488Match-

Node

tp-linkwar1300l_firmwareMatch-

AND

tp-linkwar1300lMatch-

Node

tp-linkwar1750l_firmwareMatch-

AND

tp-linkwar1750lMatch-

Node

tp-linkwar2600l_firmwareMatch-

AND

tp-linkwar2600lMatch-

Node

tp-linkwar302_firmwareMatch-

AND

tp-linkwar302Match-

Node

tp-linkwar450l_firmwareMatch-

AND

tp-linkwar450lMatch-

Node

tp-linkwar450_firmwareMatch-

AND

tp-linkwar450Match-

Node

tp-linkwar458l_firmwareMatch-

AND

tp-linkwar458lMatch-

Node

tp-linkwar458_firmwareMatch-

AND

tp-linkwar458Match-

Node

tp-linkwar900l_firmwareMatch-

AND

tp-linkwar900lMatch-

Node

tp-linkwvr1300g_firmwareMatch-

AND

tp-linkwvr1300gMatch-

Node

tp-linkwvr1300l_firmwareMatch-

AND

tp-linkwvr1300lMatch-

Node

tp-linkwvr1750l_firmwareMatch-

AND

tp-linkwvr1750lMatch-

Node

tp-linkwvr2600l_firmwareMatch-

AND

tp-linkwvr2600lMatch-

Node

tp-linkwvr300_firmwareMatch-

AND

tp-linkwvr300Match-

Node

tp-linkwvr302_firmwareMatch-

AND

tp-linkwvr302Match-

Node

tp-linkwvr4300l_firmwareMatch-

AND

tp-linkwvr4300lMatch-

Node

tp-linkwvr450l_firmwareMatch1.0161125

AND

tp-linkwvr450lMatch-

Node

tp-linkwvr450_firmwareMatch-

AND

tp-linkwvr450Match-

Node

tp-linkwvr458l_firmwareMatch-

AND

tp-linkwvr458lMatch-

Node

tp-linkwvr900g_firmwareMatch3.0_170306

AND

tp-linkwvr900gMatch-

Node

tp-linkwvr900l_firmwareMatch-

AND

tp-linkwvr900lMatch-

VendorProductVersionCPE
tp-linker5110g_firmware-cpe:2.3:o:tp-link:er5110g_firmware:-:*:*:*:*:*:*:*
tp-linker5110g-cpe:2.3:h:tp-link:er5110g:-:*:*:*:*:*:*:*
tp-linker5120g_firmware-cpe:2.3:o:tp-link:er5120g_firmware:-:*:*:*:*:*:*:*
tp-linker5120g-cpe:2.3:h:tp-link:er5120g:-:*:*:*:*:*:*:*
tp-linker5510g_firmware-cpe:2.3:o:tp-link:er5510g_firmware:-:*:*:*:*:*:*:*
tp-linker5510g-cpe:2.3:h:tp-link:er5510g:-:*:*:*:*:*:*:*
tp-linker5520g_firmware-cpe:2.3:o:tp-link:er5520g_firmware:-:*:*:*:*:*:*:*
tp-linker5520g-cpe:2.3:h:tp-link:er5520g:-:*:*:*:*:*:*:*
tp-linkr4149g_firmware-cpe:2.3:o:tp-link:r4149g_firmware:-:*:*:*:*:*:*:*
tp-linkr4149g-cpe:2.3:h:tp-link:r4149g:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tp-link	er5110g_firmware	-	cpe:2.3:o:tp-link:er5110g_firmware:-:::::::*
tp-link	er5110g	-	cpe:2.3:h:tp-link:er5110g:-:::::::*
tp-link	er5120g_firmware	-	cpe:2.3:o:tp-link:er5120g_firmware:-:::::::*
tp-link	er5120g	-	cpe:2.3:h:tp-link:er5120g:-:::::::*
tp-link	er5510g_firmware	-	cpe:2.3:o:tp-link:er5510g_firmware:-:::::::*
tp-link	er5510g	-	cpe:2.3:h:tp-link:er5510g:-:::::::*
tp-link	er5520g_firmware	-	cpe:2.3:o:tp-link:er5520g_firmware:-:::::::*
tp-link	er5520g	-	cpe:2.3:h:tp-link:er5520g:-:::::::*
tp-link	r4149g_firmware	-	cpe:2.3:o:tp-link:r4149g_firmware:-:::::::*
tp-link	r4149g	-	cpe:2.3:h:tp-link:r4149g:-:::::::*

Rows per page:

1-10 of 761

References

www.securityfocus.com/archive/1/541655/100/0/threaded

github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

50.0%

JSON

Related for CVE-2017-15625