4869 matches found
CVE-2017-15616
Technical details for CVE-2017-15616 are not publicly available in the provided documents. No confirmed affected products, versions, or exploit information are present here. Monitor for updates to the CVE entry and connected sources.
CVE-2017-15621
What is affected: TP-Link WVR, WAR and ER devices. Vulnerability: remote authenticated administrators can execute arbitrary commands via command injection in the olmode variable in the interface_wan.lua file. Impact: high (CVSS v3 base score 7.2; confidentiality, integrity, and availability are a...
CVE-2017-15636
CVE-2017-15636 affects TP-Link WVR, WAR and ER devices. It allows remote authenticated administrators to execute arbitrary commands via a command injection in the new-time variable in the webfilter.lua file. The provided metrics indicate a high impact (C/H/I/A) with network access and no user int...
CVE-2017-15625
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-olmode variable in the pptpclient.lua file...
CVE-2017-15633
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-ipgroup variable in the sessionlimits.lua file...
CVE-2017-15622
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-mppeencryption variable in the pptpclient.lua file...
CVE-2017-15623
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-enable variable in the pptpserver.lua file...
CVE-2017-15632
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-mppeencryption variable in the pptpserver.lua file...
CVE-2017-15626
Technical details about CVE-2017-15626 are not publicly available in the provided connected documents. Monitoring for updates is recommended; the connected EUVD entries refer to malware notes without device/vendor specifics.
CVE-2017-15615
Technical details about CVE-2017-15615 are not publicly provided in the supplied connected documents. Monitor for updates from ENISA EUVD entries; no vendor/product/version mappings or fixes are described here.
CVE-2017-15623
Technical details for CVE-2017-15623 are not publicly available in the provided documents. The initial description indicates a command-injection in TP-Link devices, but no verifiable specifics, affected products, or fixes are supplied here. Monitor for updates.
CVE-2017-15637
CVE-2017-15637 affects TP-Link WVR, WAR and ER devices. A remote authenticated administrator can execute arbitrary commands via command injection in the pptp_server.lua pptphellointerval variable. The provided sources list high-severity impacts (C, I, A all HIGH) and a network attack vector with ...
CVE-2017-15620
CVE-2017-15620 concerns TP-Link WVR, WAR and ER devices. The issue is a command-injection vulnerability in the ipmac_import.lua file’s new-zone variable that can be exploited by remote authenticated administrators to execute arbitrary commands. This implies attackers with valid credentials and ac...
CVE-2017-15630
Technical details beyond the initial description are not publicly available in the provided connected documents. Monitor for updates.
CVE-2017-15614
Technical details about CVE-2017-15614 are not publicly available in the provided connected documents. The EUVD entries describe malware named 'sbrugna' but do not elaborate on affected products, versions, or root cause. Monitor for updates.
CVE-2017-15626
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-bindif variable in the pptpserver.lua file...
CVE-2017-15627
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-pns variable in the pptpclient.lua file...
CVE-2017-15624
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-authtype variable in the pptpserver.lua file...