CVE-2017-16959

creationtimestamp| type| source ---|---|--- 2024-10-28 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-10-28 2024-11-02 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-02 2024-11-09 00:00:00+00:00| seen| The Shadowserver...

CVE-2017-16959

The locale feature in cgi-bin/luci on TP-Link devices (specifically TL-WVR , TL-WAR , TL-ER , and TL-R ) is vulnerable to an information disclosure flaw. A remote authenticated user can test for the existence of arbitrary files by sending an operation=write;locale=%0d request, followed by an oper...