CVE-2017-16957

TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the iface field of an admin/diagnostic command to cgi-bin/luci, related to the zonegeteffectdevices function in...

CVE-2017-16957

CVE-2017-16957 affects TP-Link TL-WVR, TL-WAR, TL-ER and TL-R devices. A remote authenticated attacker can inject shell metacharacters via the iface field in the admin/diagnostic interface (cgi-bin/luci) that calls zone_get_effect_devices in /usr/lib/lua/luci/controller/admin/diagnostic.lua, trig...

CVE-2017-16960

TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the tbindif field of an admin/interface command to cgi-bin/luci, related to the getdevicebyif function in /usr/lib/lua/luci/controller/admin/interface.lua in...

CVE-2017-16958

TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the tbindif field of an admin/bridge command to cgi-bin/luci, related to the getdevicebyif function in /usr/lib/lua/luci/controller/admin/bridge.lua in uhttpd...

CVE-2017-16959: Improper Limitation of a Pathname to a Restricted Directory

The locale feature in cgi-bin/luci on TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allows remote authenticated users to test for the existence of arbitrary files by making an operation=write;locale=%0d request, and then making an operation=read request with a crafted Accept-Language HTTP heade...

CVE-2017-16957: Improper Neutralization of Special Elements used in an OS Command

TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the iface field of an admin/diagnostic command to cgi-bin/luci, related to the zonegeteffectdevices function in...

CVE-2017-16958: Improper Neutralization of Special Elements used in an OS Command

TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the tbindif field of an admin/bridge command to cgi-bin/luci, related to the getdevicebyif function in /usr/lib/lua/luci/controller/admin/bridge.lua in uhttpd...

CVE-2017-16960: Improper Neutralization of Special Elements used in an OS Command

TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the tbindif field of an admin/interface command to cgi-bin/luci, related to the getdevicebyif function in /usr/lib/lua/luci/controller/admin/interface.lua in...

tp-link.com XSS vulnerability

Vulnerable URL: http://www.tp-link.com/us/download/TL-WN821NV2.html Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 14:45 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5017 VIP website status:| Yes Coordinat...

TP-Link TL-WA830RE - Cross-Site Scripting Vulnerability

Exploit for hardware platform in category web applications TP-LINK TL-WA830RE http://www.tp-link.com Firmware Version: 3.14.8 Build 140901 Rel.58502n Hardware Version: WA830RE v2 00000000 Tested on: Windows 10 Cross-site scripting XSS in TP-LINK TL-WA830RE https://up.traidnt.net/img/Zq5u4z.png...

TP-Link TL-WR740N - Cross-Site Scripting

TP-Link TL-WR740N - Cross-Site Scripting Exploit Title: XSS Vuln - TP-LINK TL-WR740N Date: 15/11/2017 Exploit Author: bl00dy Vendor Homepage: http://www.tp-link.com Version: TP-LINK TL-WR740N - 3.17.0 Build 140520 Rel.75075n Tested on: Windows 8.1 Cross-site scripting XSS in TP-LINK TL-WR740N Pro...

TP-Link TL-WR740N - Cross-Site Scripting

Exploit Title: XSS Vuln - TP-LINK TL-WR740N Date: 15/11/2017 Exploit Author: bl00dy Vendor Homepage: http://www.tp-link.com Version: TP-LINK TL-WR740N - 3.17.0 Build 140520 Rel.75075n Tested on: Windows 8.1 Cross-site scripting XSS in TP-LINK TL-WR740N Proof of Concept: 1. Go to your wireless...

TP-Link TL-WR740N - Cross-Site Scripting Vulnerability

Exploit for hardware platform in category web applications Exploit Title: XSS Vuln - TP-LINK TL-WR740N Date: 15/11/2017 Exploit Author: bl00dy Vendor Homepage: http://www.tp-link.com Version: TP-LINK TL-WR740N - 3.17.0 Build 140520 Rel.75075n Tested on: Windows 8.1 Cross-site scripting XSS in...

The vulnerability of the ftptpd component in the microprogramming software of TP-Link Technologies CO.,LTD.’s C2 and C20i routers allows attackers to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the ftptpd component in the C2 and C20i router microprogramming systems is related to the use of pre-installed accounts admin, guest, and test, with passwords “1234”, “guest”, and “test” respectively. Exploiting this vulnerability allows a malicious actor to compromise the...

TP-Link TL-MR3220 XSS Vulnerability (CVE-2017-15291)

TP-Link TL-MR3220 Wireless N Router devices are prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

TP-Link Wireless Router Detection (HTTP)

HTTP based detection of TP-Link Wireless Routers. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

REMOTE CODE EXECUTION (CVE-2017-13772) WALKTHROUGH ON A TP-LINK ROUTER

INTRODUCTION In this post, I will be discussing my recent findings while conducting vulnerability research on a home router: TP-Link’s WR940N home WiFi router. This post will outline the steps taken to identify vulnerable code paths, and how we can exploit those paths to gain remote code executio...

Stack overflow

Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated users to execute arbitrary code via the 1 pingaddr parameter to PingIframeRpm.htm or 2 dnsserver2 parameter to WanStaticIpV6CfgRpm.htm...

CVE-2017-13772

Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated users to execute arbitrary code via the 1 pingaddr parameter to PingIframeRpm.htm or 2 dnsserver2 parameter to WanStaticIpV6CfgRpm.htm...

CVE-2017-13772

Summary (from provided sources): CVE-2017-13772 is a stack-based buffer overflow vulnerability in TP-Link WR940N routers (hardware version 4) that allows remote authenticated code execution via GET parameters, specifically ping_addr in PingIframeRpm.htm or dnsserver2 in WanStaticIpV6CfgRpm.htm. C...