CVE-2017-16960

TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the tbindif field of an admin/interface command to cgi-bin/luci, related to the getdevicebyif function in /usr/lib/lua/luci/controller/admin/interface.lua in...

CVE-2017-16957

TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the iface field of an admin/diagnostic command to cgi-bin/luci, related to the zonegeteffectdevices function in...

CVE-2017-16958

TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the tbindif field of an admin/bridge command to cgi-bin/luci, related to the getdevicebyif function in /usr/lib/lua/luci/controller/admin/bridge.lua in uhttpd...

CVE-2017-16958

The CVE affects TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices. Affected component is the admin/bridge CGI in uhttpd, where shell metacharacters in the t_bindif field passed via the admin/bridge command to cgi-bin/luci can lead to remote command execution. Root cause is input constructed to trig...

CVE-2017-16960

This entry (CVE-2017-16960) concerns TP-Link devices TL-WVR, TL-WAR, TL-ER, and TL-R where remote authenticated users can execute arbitrary commands via shell metacharacters in the t_bindif parameter sent to cgi-bin/luci, related to get_device_byif in /usr/lib/lua/luci/controller/admin/interface....

PT-2017-14659

Name of the Vulnerable Software and Affected Versions TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices affected versions not specified Description The issue allows remote authenticated users to execute arbitrary commands by injecting shell metacharacters in the iface field of an admin/diagnostic...

PT-2017-14660

Name of the Vulnerable Software and Affected Versions TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices affected versions not specified Description The issue allows remote authenticated users to execute arbitrary commands by injecting shell metacharacters in the t bindif field of an admin/bridge...

PT-2017-14663

Name of the Vulnerable Software and Affected Versions TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices affected versions not specified Description The issue allows remote authenticated users to execute arbitrary commands by injecting shell metacharacters in the t bindif field of an admin/interface...

PT-2017-14661

Name of the Vulnerable Software and Affected Versions TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices affected versions not specified Description The locale feature in cgi-bin/luci allows remote authenticated users to test for the existence of arbitrary files. This is achieved by making an...

CVE-2017-16959: Improper Limitation of a Pathname to a Restricted Directory

The locale feature in cgi-bin/luci on TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allows remote authenticated users to test for the existence of arbitrary files by making an operation=write;locale=%0d request, and then making an operation=read request with a crafted Accept-Language HTTP heade...

CVE-2017-16960: Improper Neutralization of Special Elements used in an OS Command

TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the tbindif field of an admin/interface command to cgi-bin/luci, related to the getdevicebyif function in /usr/lib/lua/luci/controller/admin/interface.lua in...

CVE-2017-16958: Improper Neutralization of Special Elements used in an OS Command

TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the tbindif field of an admin/bridge command to cgi-bin/luci, related to the getdevicebyif function in /usr/lib/lua/luci/controller/admin/bridge.lua in uhttpd...

Directory traversal

Directory Traversal vulnerability in appdatacenter on Shenzhen Tenda Ac9 USAC9V1.0BRV15.03.05.14multiTD01, Ac9 ac9kfV15.03.05.196318cn, Ac15 USAC15V1.0BRV15.03.05.18multiTD01, Ac15 USAC15V1.0BRV15.03.05.19multiTD01, Ac18 USAC18V1.0BRV15.03.05.05multiTD01, and Ac18 ac18kfV15.03.05.196318cn devices...

PT-2017-14644

Name of the Vulnerable Software and Affected Versions Shenzhen Tenda Ac9 US AC9V1.0BR V15.03.05.14 multi TD01 Shenzhen Tenda Ac9 ac9 kf V15.03.05.196318 cn Shenzhen Tenda Ac15 US AC15V1.0BR V15.03.05.18 multi TD01 Shenzhen Tenda Ac15 US AC15V1.0BR V15.03.05.19 multi TD01 Shenzhen Tenda Ac18 US...

CVE-2017-16936: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal vulnerability in appdatacenter on Shenzhen Tenda Ac9 USAC9V1.0BRV15.03.05.14multiTD01, Ac9 ac9kfV15.03.05.196318cn, Ac15 USAC15V1.0BRV15.03.05.18multiTD01, Ac15 USAC15V1.0BRV15.03.05.19multiTD01, Ac18 USAC18V1.0BRV15.03.05.05multiTD01, and Ac18 ac18kfV15.03.05.196318cn devices...

CVE-2017-16923

The CVE-2017-16923 entry describes a Command Injection vulnerability in the app_data_center component of several Shenzhen Tenda router models (e.g., Ac9, Ac15, Ac18 variants). The underlying issue is that the function sub_A6E8 usbeject_process_entry executes a system function using untrusted inpu...

PT-2017-14638

Name of the Vulnerable Software and Affected Versions Shenzhen Tenda Ac9 US AC9V1.0BR V15.03.05.14 multi TD01 Shenzhen Tenda Ac9 ac9 kf V15.03.05.196318 cn Shenzhen Tenda Ac15 US AC15V1.0BR V15.03.05.18 multi TD01 Shenzhen Tenda Ac15 US AC15V1.0BR V15.03.05.19 multi TD01 Shenzhen Tenda Ac18 US...

CVE-2017-16923: Improper Neutralization of Special Elements used in an OS Command

Command Injection vulnerability in appdatacenter on Shenzhen Tenda Ac9 USAC9V1.0BRV15.03.05.14multiTD01, Ac9 ac9kfV15.03.05.196318cn, Ac15 USAC15V1.0BRV15.03.05.18multiTD01, Ac15 USAC15V1.0BRV15.03.05.19multiTD01, Ac18 USAC18V1.0BRV15.03.05.05multiTD01, and Ac18 ac18kfV15.03.05.196318cn devices...

CVE-2017-16882

Icinga Core through 1.14.0 initially executes bin/icinga as root but supports configuration options in which this file is owned by a non-root account and similarly can have etc/icinga.cfg owned by a non-root account, which allows local users to gain privileges by leveraging access to this non-roo...

CVE-2017-16882

Icinga Core through 1.14.0 initially executes bin/icinga as root but supports configuration options in which this file is owned by a non-root account and similarly can have etc/icinga.cfg owned by a non-root account, which allows local users to gain privileges by leveraging access to this non-roo...