Lucene search

[email protected]CVE-2017-16957

HistoryNov 27, 2017 - 10:29 a.m.

CVE-2017-16957

2017-11-2710:29:00

CWE-78

[email protected]

web.nvd.nist.gov

cve

2017

16957

tp-link

tl-wvr

tl-war

tl-er

tl-r

remote authenticated users

arbitrary commands

shell metacharacters

remote code execution

uhttpd

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

Low

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

55.6%

JSON

TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the iface field of an admin/diagnostic command to cgi-bin/luci, related to the zone_get_effect_devices function in /usr/lib/lua/luci/controller/admin/diagnostic.lua in uhttpd.

CPENameOperatorVersion
tp-link:tl-wvr300_firmwaretp-link tl-wvr300 firmwareeq-
tp-link:tl-wvr302_firmwaretp-link tl-wvr302 firmwareeq-
tp-link:tl-wvr450_firmwaretp-link tl-wvr450 firmwareeq-
tp-link:tl-wvr450l_firmwaretp-link tl-wvr450l firmwareeq-
tp-link:tl-wvr450g_firmwaretp-link tl-wvr450g firmwareeq-
tp-link:tl-wvr458_firmwaretp-link tl-wvr458 firmwareeq-
tp-link:tl-wvr458l_firmwaretp-link tl-wvr458l firmwareeq-
tp-link:tl-wvr458p_firmwaretp-link tl-wvr458p firmwareeq-
tp-link:tl-wvr900g_firmwaretp-link tl-wvr900g firmwareeq-
tp-link:tl-wvr900l_firmwaretp-link tl-wvr900l firmwareeq-

CPE	Name	Operator	Version
tp-link:tl-wvr300_firmware	tp-link tl-wvr300 firmware	eq	-
tp-link:tl-wvr302_firmware	tp-link tl-wvr302 firmware	eq	-
tp-link:tl-wvr450_firmware	tp-link tl-wvr450 firmware	eq	-
tp-link:tl-wvr450l_firmware	tp-link tl-wvr450l firmware	eq	-
tp-link:tl-wvr450g_firmware	tp-link tl-wvr450g firmware	eq	-
tp-link:tl-wvr458_firmware	tp-link tl-wvr458 firmware	eq	-
tp-link:tl-wvr458l_firmware	tp-link tl-wvr458l firmware	eq	-
tp-link:tl-wvr458p_firmware	tp-link tl-wvr458p firmware	eq	-
tp-link:tl-wvr900g_firmware	tp-link tl-wvr900g firmware	eq	-
tp-link:tl-wvr900l_firmware	tp-link tl-wvr900l firmware	eq	-

Rows per page:

1-10 of 531

References

www.securityfocus.com/bid/101968

github.com/coincoin7/Wireless-Router-Vulnerability/blob/master/TplinkDiagnosticAuthenticatedRCE.txt

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

Low

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

55.6%

JSON

Related for CVE-2017-16957

prion1 seebug1 cvelist1