Lucene search

[email protected]CVE-2017-17758

HistoryDec 19, 2017 - 7:29 a.m.

CVE-2017-17758

2017-12-1907:29:00

CWE-78

[email protected]

web.nvd.nist.gov

cve-2017-17758

tp-link

remote code execution

authenticated users

arbitrary commands

shell metacharacters

interface field

admin

dhcps

cgi-bin

luci

zone_get_iface_bydev

uhttpd

lua

security vulnerability

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.3 High

AI Score

Confidence

Low

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

61.1%

JSON

TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the interface field of an admin/dhcps command to cgi-bin/luci, related to the zone_get_iface_bydev function in /usr/lib/lua/luci/controller/admin/dhcps.lua in uhttpd.

CPENameOperatorVersion
tp-link:tl-wvr450l_firmwaretp-link tl-wvr450l firmwareeq-
tp-link:tl-wvr458l_firmwaretp-link tl-wvr458l firmwareeq-
tp-link:tl-wvr900l_firmwaretp-link tl-wvr900l firmwareeq-
tp-link:tl-wvr1200l_firmwaretp-link tl-wvr1200l firmwareeq-
tp-link:tl-wvr1300l_firmwaretp-link tl-wvr1300l firmwareeq-
tp-link:tl-wvr1750l_firmwaretp-link tl-wvr1750l firmwareeq-
tp-link:tl-wvr2600l_firmwaretp-link tl-wvr2600l firmwareeq-
tp-link:tl-wvr4300l_firmwaretp-link tl-wvr4300l firmwareeq-
tp-link:tl-war450l_firmwaretp-link tl-war450l firmwareeq-
tp-link:tl-war458l_firmwaretp-link tl-war458l firmwareeq-

CPE	Name	Operator	Version
tp-link:tl-wvr450l_firmware	tp-link tl-wvr450l firmware	eq	-
tp-link:tl-wvr458l_firmware	tp-link tl-wvr458l firmware	eq	-
tp-link:tl-wvr900l_firmware	tp-link tl-wvr900l firmware	eq	-
tp-link:tl-wvr1200l_firmware	tp-link tl-wvr1200l firmware	eq	-
tp-link:tl-wvr1300l_firmware	tp-link tl-wvr1300l firmware	eq	-
tp-link:tl-wvr1750l_firmware	tp-link tl-wvr1750l firmware	eq	-
tp-link:tl-wvr2600l_firmware	tp-link tl-wvr2600l firmware	eq	-
tp-link:tl-wvr4300l_firmware	tp-link tl-wvr4300l firmware	eq	-
tp-link:tl-war450l_firmware	tp-link tl-war450l firmware	eq	-
tp-link:tl-war458l_firmware	tp-link tl-war458l firmware	eq	-

Rows per page:

1-10 of 151

References

github.com/L1ZhaoXin/Router-Vulnerability-Research/blob/master/Tplink_LUCI_Dhcps_Authenticated_RCE_Record.txt

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.3 High

AI Score

Confidence

Low

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

61.1%

JSON

Related for CVE-2017-17758

cvelist1 prion1