CVE-2017-15613

Technical details for CVE-2017-15613 are not publicly available in the provided documents; monitor for updates.

CVE-2017-15620

CVE-2017-15620 concerns TP-Link WVR, WAR and ER devices. The issue is a command-injection vulnerability in the ipmac_import.lua file’s new-zone variable that can be exploited by remote authenticated administrators to execute arbitrary commands. This implies attackers with valid credentials and ac...

CVE-2017-15630

Technical details beyond the initial description are not publicly available in the provided connected documents. Monitor for updates.

CVE-2017-15635

Technical details for CVE-2017-15635 are not publicly provided in the supplied connected documents. Monitor for updates from official advisories; no affected product versions, exploitation status, or remediation are specified here.

CVE-2017-15619

Technical details for CVE-2017-15619 are not publicly available in the provided documents. The initial description mentions command injection in pptp_client.lua affecting TP-Link WVR/WAR/ER devices, but no further specifics are provided here. Monitor for updates.

PT-2018-5949

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the new-remotesubnet variable in the pptp client.lua file...

PT-2018-5930

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the new-interface variable in the cmxddns.lua file...

PT-2018-5939

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the olmode variable in the interface wan.lua file...

PT-2018-5955

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the new-time variable in the webfilter.lua file...

CVE-2017-15621: Undefined Security Weakness

TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the olmode variable in the interfacewan.lua file...

CVE-2017-15618: Undefined Security Weakness

TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-enable variable in the pptpclient.lua file...

CVE-2017-15613: Undefined Security Weakness

TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-interface variable in the cmxddns.lua file...

CVE-2017-15624: Undefined Security Weakness

TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-authtype variable in the pptpserver.lua file...

CVE-2017-15619: Undefined Security Weakness

TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the pptphellointerval variable in the pptpclient.lua file...

CVE-2017-15629: Undefined Security Weakness

TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-tunnelname variable in the pptpclient.lua file...

PT-2018-5934

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the iface variable in the interface wan.lua file...

CVE-2017-15636: Undefined Security Weakness

TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-time variable in the webfilter.lua file...

PT-2018-5935

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the new-enable variable in the pptp client.lua file...

CVE-2017-15625: Undefined Security Weakness

TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-olmode variable in the pptpclient.lua file...

PT-2018-5944

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the new-bindif variable in the pptp server.lua file...