CVE-2017-15617

TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the iface variable in the interfacewan.lua file...

CVE-2017-15614

Technical details about CVE-2017-15614 are not publicly available in the provided connected documents. The EUVD entries describe malware named 'sbrugna' but do not elaborate on affected products, versions, or root cause. Monitor for updates.

CVE-2017-15617

Technical details for CVE-2017-15617 are not publicly provided in the supplied connected documents. Monitor for updates.

CVE-2017-15626

Technical details about CVE-2017-15626 are not publicly available in the provided connected documents. Monitoring for updates is recommended; the connected EUVD entries refer to malware notes without device/vendor specifics.

CVE-2017-15616

Technical details for CVE-2017-15616 are not publicly available in the provided documents. No confirmed affected products, versions, or exploit information are present here. Monitor for updates to the CVE entry and connected sources.

CVE-2017-15624

Technical details for CVE-2017-15624 are not publicly available in the provided documents. Monitor for updates from official sources for affected devices and remediation.

CVE-2017-15634

Technical details for CVE-2017-15634 are not publicly available in the provided documents. Monitor for updates from official sources to obtain affected products, affected components, impact, and remediation.

CVE-2017-15632

CVE-2017-15632 affects TP-Link WVR, WAR and ER devices via a command injection in the pptp_server.lua file, exploitable by remote authenticated administrators. The description states arbitrary command execution via the new-mppeencryption variable. No remediation or version details are provided in...

CVE-2017-15618

CVE-2017-15618 affects TP-Link WVR, WAR and ER devices. A remote authenticated administrator can run arbitrary commands through a command injection in the pptp_client.lua file, via the new-enable variable. The description specifies remote command execution with HIGH impact on confidentiality, int...

CVE-2017-15626

TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-bindif variable in the pptpserver.lua file...

CVE-2017-15614

TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-outif variable in the pptpclient.lua file...

CVE-2017-15634

TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the name variable in the wportal.lua file...

CVE-2017-15624

TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-authtype variable in the pptpserver.lua file...

CVE-2017-15618

TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-enable variable in the pptpclient.lua file...

CVE-2017-15616

TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-interface variable in the phddns.lua file...

CVE-2017-15632

TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-mppeencryption variable in the pptpserver.lua file...

TP-Link WVR, WAR and ER Device Arbitrary Command Execution Vulnerability (CNVD-2018-01907)

TP-Link WVR, WAR and ER devices are all different series of router products from China P&L TP-LINK. An arbitrary command execution vulnerability exists in the TP-Link WVR, WAR, and ER devices. A remote attacker can exploit this vulnerability to execute arbitrary commands by injecting commands int...

TP-Link WVR, WAR and ER Device Arbitrary Command Execution Vulnerability (CNVD-2018-01910)

TP-Link WVR, WAR and ER devices are all different series of router products from China P&L TP-LINK. A security vulnerability exists in the TP-Link WVR, WAR, and ER devices. A remote attacker can exploit the vulnerability by injecting commands into the pptphellointerval variable in the...

TP-Link WVR, WAR and ER Device Arbitrary Command Execution Vulnerability (CNVD-2018-02032)

TP-Link WVR, WAR and ER devices are all different series of router products from China P&L TP-LINK. A security vulnerability exists in the TP-Link WVR, WAR, and ER devices. The vulnerability can be exploited by a remote attacker to execute arbitrary commands by injecting commands into the...

TP-Link WVR, WAR and ER Device Arbitrary Command Execution Vulnerability (CNVD-2018-02034)

TP-Link WVR, WAR and ER devices are all different series of router products from China P&L TP-LINK. A security vulnerability exists in the TP-Link WVR, WAR, and ER devices. The vulnerability can be exploited by a remote attacker to execute arbitrary commands by injecting commands into the...