5726 matches found
CVE-2017-15619
Technical details for CVE-2017-15619 are not publicly available in the provided documents. The initial description mentions command injection in pptp_client.lua affecting TP-Link WVR/WAR/ER devices, but no further specifics are provided here. Monitor for updates.
CVE-2017-15633
Technical details for CVE-2017-15633 are not provided in the connected documents. The available sources describe the vulnerability at a high level; monitor for updates regarding affected products, impact, or mitigations.
CVE-2017-15622
Technical details for CVE-2017-15622 are not publicly provided in the supplied documents. No concrete affected products, versions, or exploit information are present. Monitor for updates.
CVE-2017-15625
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-olmode variable in the pptpclient.lua file...
CVE-2017-15618
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-enable variable in the pptpclient.lua file...
CVE-2017-15613
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-interface variable in the cmxddns.lua file...
CVE-2017-15633
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-ipgroup variable in the sessionlimits.lua file...
CVE-2017-15622
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-mppeencryption variable in the pptpclient.lua file...
CVE-2017-15621
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the olmode variable in the interfacewan.lua file...
CVE-2017-15636
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-time variable in the webfilter.lua file...
CVE-2017-15617
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the iface variable in the interfacewan.lua file...
CVE-2017-15613
Technical details for CVE-2017-15613 are not publicly available in the provided documents; monitor for updates.
CVE-2017-15627
CVE-2017-15627 affects TP-Link WVR, WAR and ER devices. The issue is a command injection in the pptp_client.lua file via the new-pns variable, exploitable by remote authenticated administrators. CVSSv3 base score 7.2 (HIGH); attack vector NETWORK, attack complexity LOW, privileges required HIGH, ...
CVE-2017-15616
Technical details for CVE-2017-15616 are not publicly available in the provided documents. No confirmed affected products, versions, or exploit information are present here. Monitor for updates to the CVE entry and connected sources.
CVE-2017-15621
What is affected: TP-Link WVR, WAR and ER devices. Vulnerability: remote authenticated administrators can execute arbitrary commands via command injection in the olmode variable in the interface_wan.lua file. Impact: high (CVSS v3 base score 7.2; confidentiality, integrity, and availability are a...
CVE-2017-15636
CVE-2017-15636 affects TP-Link WVR, WAR and ER devices. It allows remote authenticated administrators to execute arbitrary commands via a command injection in the new-time variable in the webfilter.lua file. The provided metrics indicate a high impact (C/H/I/A) with network access and no user int...
CVE-2017-15615
Technical details about CVE-2017-15615 are not publicly provided in the supplied connected documents. Monitor for updates from ENISA EUVD entries; no vendor/product/version mappings or fixes are described here.
CVE-2017-15626
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-bindif variable in the pptpserver.lua file...