5759 matches found
CVE-2017-15614
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-outif variable in the pptpclient.lua file...
CVE-2017-15623
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-enable variable in the pptpserver.lua file...
CVE-2017-15630
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-remotesubnet variable in the pptpclient.lua file...
CVE-2017-15620
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-zone variable in the ipmacimport.lua file...
CVE-2017-15629
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-tunnelname variable in the pptpclient.lua file...
CVE-2017-15632
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-mppeencryption variable in the pptpserver.lua file...
CVE-2017-15626
Technical details about CVE-2017-15626 are not publicly available in the provided connected documents. Monitoring for updates is recommended; the connected EUVD entries refer to malware notes without device/vendor specifics.
CVE-2017-15624
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-authtype variable in the pptpserver.lua file...
CVE-2017-15637
CVE-2017-15637 affects TP-Link WVR, WAR and ER devices. A remote authenticated administrator can execute arbitrary commands via command injection in the pptp_server.lua pptphellointerval variable. The provided sources list high-severity impacts (C, I, A all HIGH) and a network attack vector with ...
CVE-2017-15620
CVE-2017-15620 concerns TP-Link WVR, WAR and ER devices. The issue is a command-injection vulnerability in the ipmac_import.lua file’s new-zone variable that can be exploited by remote authenticated administrators to execute arbitrary commands. This implies attackers with valid credentials and ac...
CVE-2017-15623
Technical details for CVE-2017-15623 are not publicly available in the provided documents. The initial description indicates a command-injection in TP-Link devices, but no verifiable specifics, affected products, or fixes are supplied here. Monitor for updates.
CVE-2017-15614
Technical details about CVE-2017-15614 are not publicly available in the provided connected documents. The EUVD entries describe malware named 'sbrugna' but do not elaborate on affected products, versions, or root cause. Monitor for updates.
CVE-2017-15630
Technical details beyond the initial description are not publicly available in the provided connected documents. Monitor for updates.
TP-Link 路由器命令注入漏洞(CVE-2017-16957)
0x01 背景 TP-Link TL-WVR 等都是中国普联（TP-LINK）公司的无线路由器产品。 多款 TP-Link 系列产品存在命令注入漏洞，攻击者在登录后可发送恶意字段，经拼接后导致任意命令执行。 该漏洞由 coincoin7 发现，漏洞编号 CVE-2017-16957 0x02 受影响产品 TP-LINK TL-WVR 系列 TP-LINK TL-WAR 系列 TP-LINK TL-ER 系列 TP-LINK TL-R 系列 0x03 漏洞分析 根据原文提供的链接，下载了 TL-WVR450L 的固件，使用 binwalk 解包，拿到 squashfs 系统文件，再用...
TP-Link WVR, WAR and ER Device Arbitrary Command Execution Vulnerability (CNVD-2018-02026)
TP-Link WVR, WAR and ER devices are all different series of router products from China P&L TP-LINK. A security vulnerability exists in the TP-Link WVR, WAR, and ER devices. A remote attacker can exploit the vulnerability by injecting commands into the pptphellointerval variable of the...
TP-Link Remote Command Injection
Introduction: ================ The WVR-, WAR- and ER- products are the SOHO/WIFI routers of TP-Link. These issues allow remote authenticated administrators to execute arbitrary commands via command injection through different variables of different lua files. If the attacker obtains the account a...
TP-Link WVR, WAR and ER Device Arbitrary Command Execution Vulnerability (CNVD-2018-02027)
TP-Link WVR, WAR and ER devices are all different series of router products from China P&L TP-LINK. A security vulnerability exists in the TP-Link WVR, WAR, and ER devices. A remote attacker can exploit the vulnerability by injecting commands into the new-time variable of the webfilter.lua file t...
TP-Link WVR, WAR and ER Device Arbitrary Command Execution Vulnerability (CNVD-2018-02028)
TP-Link WVR, WAR and ER devices are all different series of router products from China P&L TP-LINK. A security vulnerability exists in the TP-Link WVR, WAR, and ER devices. A remote attacker can exploit the vulnerability by injecting commands into the maxconn variable of the sessionlimits.lua fil...
TP-Link WVR, WAR and ER Device Arbitrary Command Execution Vulnerability (CNVD-2018-02039)
TP-Link WVR, WAR and ER devices are all different series of router products from China P&L TP-LINK. A security vulnerability exists in the TP-Link WVR, WAR, and ER devices. The vulnerability can be exploited by a remote attacker to execute arbitrary commands by injecting commands into the...
TP-Link WVR, WAR and ER Device Arbitrary Command Execution Vulnerability (CNVD-2018-01908)
TP-Link WVR, WAR and ER devices are all different series of router products from China P&L TP-LINK. A security vulnerability exists in the TP-Link WVR, WAR, and ER devices. A remote attacker can exploit the vulnerability by injecting commands into the olmode variable of the interfacewan.lua file ...