PT-2018-5955

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the new-time variable in the webfilter.lua file...

PT-2018-5930

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the new-interface variable in the cmxddns.lua file...

PT-2018-5935

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the new-enable variable in the pptp client.lua file...

PT-2018-5932

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the lcpechointerval variable in the pptp client.lua file...

PT-2018-5936

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the pptphellointerval variable in the pptp client.lua fil...

PT-2018-5938

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the new-zone variable in the ipmac import.lua file...

PT-2018-5940

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the new-mppeencryption variable in the pptp client.lua...

PT-2018-5939

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the olmode variable in the interface wan.lua file...

PT-2018-5942

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the new-authtype variable in the pptp server.lua file...

PT-2018-5941

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the new-enable variable in the pptp server.lua file...

PT-2018-5943

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the new-olmode variable in the pptp client.lua file...

PT-2018-5944

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the new-bindif variable in the pptp server.lua file...

PT-2018-5947

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the new-tunnelname variable in the pptp client.lua file...

PT-2018-5950

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the new-workmode variable in the pptp client.lua file...

PT-2018-5945

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the new-pns variable in the pptp client.lua file...

PT-2018-5951

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the new-mppeencryption variable in the pptp server.lua...

PT-2018-5949

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the new-remotesubnet variable in the pptp client.lua file...

PT-2018-5946

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the lcpechointerval variable in the pptp server.lua file...

PT-2018-5952

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the new-ipgroup variable in the session limits.lua file...

PT-2018-5953

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices affected versions not specified Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the name variable in the wportal.lua file. Recommendation...