CVE-2017-16960

🗓️ 27 Nov 2017 10:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 51 Views🌐 WEB

TP-Link devices remote command execution via t_bindif field in admin/interface comman

Reporter	Title	Published	Views	Family All 5
CNVD	Command Injection Vulnerability in Multiple TP-Link Products (CNVD-2017-37955)	29 Nov 201700:00	–	cnvd
Cvelist	CVE-2017-16960	27 Nov 201710:00	–	cvelist
EUVD	EUVD-2017-8129	7 Oct 202500:30	–	euvd
NVD	CVE-2017-16960	27 Nov 201710:29	–	nvd
Prion	Command injection	27 Nov 201710:29	–	prion

NVD

Node

tp-link tl-er5510gMatchv2

tp-link tl-er5510gMatchv3

tp-link tl-er5520gMatchv2

tp-link tl-er5520gMatchv3

tp-link tl-er6120gMatchv2

tp-link tl-er6520gMatchv2

tp-link tl-er6520gMatchv3

tp-link tl-r4239gMatchv2

tp-link tl-r4299gMatchv2

tp-link tl-r473Matchv5

tp-link tl-r478Matchv6

tp-link tl-r478+Matchv7

tp-link tl-r478g+Matchv3

tp-link tl-r483Matchv5

tp-link tl-r483gMatchv2

tp-link tl-r488Matchv5

tp-link tl-wvr300Matchv4

tp-link tl-wvr302Matchv2

tp-link tl-wvr450gMatchv5

tp-link tl-wvr900gMatchv3

Node

tp-link tl-wvr450_firmwareMatch-

AND

tp-link tl-wvr450Match-

Node

tp-link tl-wvr450l_firmwareMatch-

AND

tp-link tl-wvr450lMatch-

Node

tp-link tl-wvr458_firmwareMatch-

AND

tp-link tl-wvr458Match-

Node

tp-link tl-wvr458l_firmwareMatch-

AND

tp-link tl-wvr458lMatch-

Node

tp-link tl-wvr458p_firmwareMatch-

AND

tp-link tl-wvr458p

Node

tp-link tl-wvr900l_firmwareMatch-

AND

tp-link tl-wvr900lMatch-

Node

tp-link tl-wvr1200l_firmwareMatch-

AND

tp-link tl-wvr1200lMatch-

Node

tp-link tl-wvr1300l_firmwareMatch-

AND

tp-link tl-wvr1300lMatch-

Node

tp-link tl-wvr1300g_firmwareMatch-

AND

tp-link tl-wvr1300gMatch-

Node

tp-link tl-wvr1750l_firmwareMatch-

AND

tp-link tl-wvr1750lMatch-

Node

tp-link tl-wvr2600l_firmwareMatch-

AND

tp-link tl-wvr2600lMatch-

Node

tp-link tl-wvr4300l_firmwareMatch-

AND

tp-link tl-wvr4300lMatch-

Node

tp-link tl-war302_firmwareMatch-

AND

tp-link tl-war302Match-

Node

tp-link tl-war450_firmwareMatch-

AND

tp-link tl-war450Match-

Node

tp-link tl-war450l_firmwareMatch-

AND

tp-link tl-war450lMatch-

Node

tp-link tl-war458_firmwareMatch-

AND

tp-link tl-war458Match-

Node

tp-link tl-war458l_firmwareMatch-

AND

tp-link tl-war458lMatch-

Node

tp-link tl-war900l_firmwareMatch-

AND

tp-link tl-war900lMatch-

Node

tp-link tl-war1200l_firmwareMatch-

AND

tp-link tl-war1200lMatch-

Node

tp-link tl-war1300l_firmwareMatch-

AND

tp-link tl-war1300lMatch-

Node

tp-link tl-war1750l_firmwareMatch-

AND

tp-link tl-war1750lMatch-

Node

tp-link tl-war2600l_firmwareMatch-

AND

tp-link tl-war2600lMatch-

Node

tp-link tl-er3210g_firmwareMatch-

AND

tp-link tl-er3210gMatch-

Node

tp-link tl-er3220g_firmware

AND

tp-link tl-er3220gMatch-

Node

tp-link tl-er5110g_firmwareMatch-

AND

tp-link tl-er5110gMatch-

Node

tp-link tl-er5120g_firmwareMatch-

AND

tp-link tl-er5120gMatch-

Node

tp-link tl-er6110g_firmwareMatch-

AND

tp-link tl-er6110gMatch-

Node

tp-link tl-er6220g_firmwareMatch-

AND

tp-link tl-er6220gMatch-

Node

tp-link tl-er6510g_firmwareMatch-

AND

tp-link tl-er6510gMatch-

Node

tp-link tl-er7520g_firmwareMatch-

AND

tp-link tl-er7520gMatch-

Node

tp-link tl-r473g_firmwareMatch-

AND

tp-link tl-r473gMatch-

Node

tp-link tl-r473p-ac_firmwareMatch-

AND

tp-link tl-r473p-acMatch-

Node

tp-link tl-r473gp-ac_firmwareMatch-

AND

tp-link tl-r473gp-acMatch-

Node

tp-link tl-r478g_firmwareMatch-

AND

tp-link tl-r478gMatch-

Node

tp-link tl-r478g_firmwareMatch-

AND

tp-link tl-r478gMatch-

Node

tp-link tl-r479p-ac_firmwareMatch-

AND

tp-link tl-r479p-acMatch-

Node

tp-link tl-r479gp-ac_firmwareMatch-

AND

tp-link tl-r479gp-acMatch-

Node

tp-link tl-r479gpe-ac_firmwareMatch-

AND

tp-link tl-r479gpe-acMatch-

Node

tp-link tl-r4149g_firmwareMatch-

AND

tp-link tl-r4149gMatch-

Source	Link
github	www.github.com/coincoin7/Wireless-Router-Vulnerability/blob/master/TplinkInterfaceAuthenticatedRCE.txt

Parameter	Position	Path	Description	CWE
t_bindif	path	cgi-bin/luci/admin/interface	Remote authenticated command execution via shell metacharacters in t_bindif field of admin/interface command to cgi-bin/luci.	CWE-78

13 May 2026 00:24Current

8.8High risk

Vulners AI Score8.8

CVSS 38.8

CVSS 29

EPSS0.00864

CWE-78