CVE-2017-17757

🗓️ 19 Dec 2017 07:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 45 Views🌐 WEB

TP-Link TL-WVR and TL-WAR allow remote authenticated users to execute arbitrary command

Reporter	Title	Published	Views	Family All 5
CNVD	TP-Link TL-WVR and TL-WAR Arbitrary Command Execution Vulnerability	19 Dec 201700:00	–	cnvd
Cvelist	CVE-2017-17757	19 Dec 201707:00	–	cvelist
EUVD	EUVD-2017-8909	7 Oct 202500:30	–	euvd
NVD	CVE-2017-17757	19 Dec 201707:29	–	nvd
Prion	Open redirect	19 Dec 201707:29	–	prion

NVD

Node

tp-link tl-wvr450l_firmwareMatch-

AND

tp-link tl-wvr450lMatch-

Node

tp-link tl-wvr458l_firmwareMatch-

AND

tp-link tl-wvr458lMatch-

Node

tp-link tl-wvr900l_firmwareMatch-

AND

tp-link tl-wvr900lMatch-

Node

tp-link tl-wvr1200l_firmwareMatch-

AND

tp-link tl-wvr1200lMatch-

Node

tp-link tl-wvr1300l_firmwareMatch-

AND

tp-link tl-wvr1300lMatch-

Node

tp-link tl-wvr1750l_firmwareMatch-

AND

tp-link tl-wvr1750lMatch-

Node

tp-link tl-wvr2600l_firmwareMatch-

AND

tp-link tl-wvr2600lMatch-

Node

tp-link tl-wvr4300l_firmwareMatch-

AND

tp-link tl-wvr4300lMatch-

Node

tp-link tl-war450l_firmwareMatch-

AND

tp-link tl-war450lMatch-

Node

tp-link tl-war458l_firmwareMatch-

AND

tp-link tl-war458lMatch-

Node

tp-link tl-war900l_firmwareMatch-

AND

tp-link tl-war900lMatch-

Node

tp-link tl-war1200l_firmwareMatch-

AND

tp-link tl-war1200lMatch-

Node

tp-link tl-war1300l_firmwareMatch-

AND

tp-link tl-war1300lMatch-

Node

tp-link tl-war1750l_firmwareMatch-

AND

tp-link tl-war1750lMatch-

Node

tp-link tl-war2600l_firmwareMatch-

AND

tp-link tl-war2600lMatch-

Source	Link
github	www.github.com/L1ZhaoXin/Router-Vulnerability-Research/blob/master/Tplink_LUCI_Wechat_Authenticated_RCE_Record.txt

Parameter	Position	Path	Description	CWE
interface	query param	cgi-bin/luci/admin/wportal	Remote authenticated command execution via shell metacharacters in interface field of admin/wportal to cgi-bin/luci.	CWE-78

13 May 2026 00:24Current

8.8High risk

Vulners AI Score8.8

CVSS 38.8

CVSS 29

EPSS0.01277

cve-2017-17757 tp-link tl-wvr tl-war remote authenticated users arbitrary commands shell metacharacters admin/wportal cgi-bin/luci uhttpd nvd