4964 matches found
CVE-2017-15632
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-mppeencryption variable in the pptpserver.lua file...
CVE-2017-15634
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the name variable in the wportal.lua file...
CVE-2017-15635
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the maxconn variable in the sessionlimits.lua file...
CVE-2017-15636
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-time variable in the webfilter.lua file...
CVE-2017-15637
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the pptphellointerval variable in the pptpserver.lua file...
CVE-2017-15615
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the lcpechointerval variable in the pptpclient.lua file...
CVE-2017-15622
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-mppeencryption variable in the pptpclient.lua file...
CVE-2017-15626
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-bindif variable in the pptpserver.lua file...
CVE-2017-15618
CVE-2017-15618 affects TP-Link WVR, WAR and ER devices. A remote authenticated administrator can run arbitrary commands through a command injection in the pptp_client.lua file, via the new-enable variable. The description specifies remote command execution with HIGH impact on confidentiality, int...
CVE-2017-15619
Technical details for CVE-2017-15619 are not publicly available in the provided documents. The initial description mentions command injection in pptp_client.lua affecting TP-Link WVR/WAR/ER devices, but no further specifics are provided here. Monitor for updates.
CVE-2017-15631
CVE-2017-15631 affects TP-Link WVR, WAR and ER devices. A vulnerability in the pptp_client.lua module allows a remote authenticated administrator to execute arbitrary commands via the new-workmode variable (command injection). According to the provided metrics, the CVSSv3 base score is 7.2 (HIGH)...
CVE-2017-15616
Technical details for CVE-2017-15616 are not publicly available in the provided documents. No confirmed affected products, versions, or exploit information are present here. Monitor for updates to the CVE entry and connected sources.
CVE-2017-15629
Technical details for CVE-2017-15629 are not publicly available in the provided documents. Monitor for updates; the connected EUVD entries reference malware but do not supply CVE specifics.
CVE-2017-15628
Technical details for CVE-2017-15628 are not publicly available in the provided connected documents; monitor for updates.
CVE-2017-15633
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-ipgroup variable in the sessionlimits.lua file...
CVE-2017-15635
Technical details for CVE-2017-15635 are not publicly provided in the supplied connected documents. Monitor for updates from official advisories; no affected product versions, exploitation status, or remediation are specified here.
CVE-2017-15617
Technical details for CVE-2017-15617 are not publicly provided in the supplied connected documents. Monitor for updates.
CVE-2017-15621
What is affected: TP-Link WVR, WAR and ER devices. Vulnerability: remote authenticated administrators can execute arbitrary commands via command injection in the olmode variable in the interface_wan.lua file. Impact: high (CVSS v3 base score 7.2; confidentiality, integrity, and availability are a...
CVE-2017-15615
Technical details about CVE-2017-15615 are not publicly provided in the supplied connected documents. Monitor for updates from ENISA EUVD entries; no vendor/product/version mappings or fixes are described here.