CVE-2017-15636

CVE-2017-15636 affects TP-Link WVR, WAR and ER devices. It allows remote authenticated administrators to execute arbitrary commands via a command injection in the new-time variable in the webfilter.lua file. The provided metrics indicate a high impact (C/H/I/A) with network access and no user int...

CVE-2017-15613

Technical details for CVE-2017-15613 are not publicly available in the provided documents; monitor for updates.

CVE-2017-15617

Technical details for CVE-2017-15617 are not publicly provided in the supplied connected documents. Monitor for updates.

CVE-2017-15633

Technical details for CVE-2017-15633 are not provided in the connected documents. The available sources describe the vulnerability at a high level; monitor for updates regarding affected products, impact, or mitigations.

CVE-2017-15631

CVE-2017-15631 affects TP-Link WVR, WAR and ER devices. A vulnerability in the pptp_client.lua module allows a remote authenticated administrator to execute arbitrary commands via the new-workmode variable (command injection). According to the provided metrics, the CVSSv3 base score is 7.2 (HIGH)...

CVE-2017-15618

CVE-2017-15618 affects TP-Link WVR, WAR and ER devices. A remote authenticated administrator can run arbitrary commands through a command injection in the pptp_client.lua file, via the new-enable variable. The description specifies remote command execution with HIGH impact on confidentiality, int...

CVE-2017-15614

Technical details about CVE-2017-15614 are not publicly available in the provided connected documents. The EUVD entries describe malware named 'sbrugna' but do not elaborate on affected products, versions, or root cause. Monitor for updates.

CVE-2017-15628

Technical details for CVE-2017-15628 are not publicly available in the provided connected documents; monitor for updates.

CVE-2017-15615

Technical details about CVE-2017-15615 are not publicly provided in the supplied connected documents. Monitor for updates from ENISA EUVD entries; no vendor/product/version mappings or fixes are described here.

CVE-2017-15621

What is affected: TP-Link WVR, WAR and ER devices. Vulnerability: remote authenticated administrators can execute arbitrary commands via command injection in the olmode variable in the interface_wan.lua file. Impact: high (CVSS v3 base score 7.2; confidentiality, integrity, and availability are a...

CVE-2017-15630

Technical details beyond the initial description are not publicly available in the provided connected documents. Monitor for updates.

CVE-2017-15634

Technical details for CVE-2017-15634 are not publicly available in the provided documents. Monitor for updates from official sources to obtain affected products, affected components, impact, and remediation.

CVE-2017-15627

CVE-2017-15627 affects TP-Link WVR, WAR and ER devices. The issue is a command injection in the pptp_client.lua file via the new-pns variable, exploitable by remote authenticated administrators. CVSSv3 base score 7.2 (HIGH); attack vector NETWORK, attack complexity LOW, privileges required HIGH, ...

CVE-2017-15622

Technical details for CVE-2017-15622 are not publicly provided in the supplied documents. No concrete affected products, versions, or exploit information are present. Monitor for updates.

CVE-2017-15624

Technical details for CVE-2017-15624 are not publicly available in the provided documents. Monitor for updates from official sources for affected devices and remediation.

CVE-2017-15632

CVE-2017-15632 affects TP-Link WVR, WAR and ER devices via a command injection in the pptp_server.lua file, exploitable by remote authenticated administrators. The description states arbitrary command execution via the new-mppeencryption variable. No remediation or version details are provided in...

CVE-2017-15629

Technical details for CVE-2017-15629 are not publicly available in the provided documents. Monitor for updates; the connected EUVD entries reference malware but do not supply CVE specifics.

CVE-2017-15620

CVE-2017-15620 concerns TP-Link WVR, WAR and ER devices. The issue is a command-injection vulnerability in the ipmac_import.lua file’s new-zone variable that can be exploited by remote authenticated administrators to execute arbitrary commands. This implies attackers with valid credentials and ac...

CVE-2017-15637

CVE-2017-15637 affects TP-Link WVR, WAR and ER devices. A remote authenticated administrator can execute arbitrary commands via command injection in the pptp_server.lua pptphellointerval variable. The provided sources list high-severity impacts (C, I, A all HIGH) and a network attack vector with ...

CVE-2017-15619

Technical details for CVE-2017-15619 are not publicly available in the provided documents. The initial description mentions command injection in pptp_client.lua affecting TP-Link WVR/WAR/ER devices, but no further specifics are provided here. Monitor for updates.

CVE-2017-15623

Technical details for CVE-2017-15623 are not publicly available in the provided documents. The initial description indicates a command-injection in TP-Link devices, but no verifiable specifics, affected products, or fixes are supplied here. Monitor for updates.

CVE-2017-15625

CVE-2017-15625 affects TP-Link WVR, WAR and ER devices. The issue is a command injection in the pptp_client.lua file via the new-olmode variable, exploitable by remote authenticated administrators to execute arbitrary commands. The description indicates a high-severity impact with potential confi...

CVE-2017-15626

Technical details about CVE-2017-15626 are not publicly available in the provided connected documents. Monitoring for updates is recommended; the connected EUVD entries refer to malware notes without device/vendor specifics.

CVE-2017-15635

Technical details for CVE-2017-15635 are not publicly provided in the supplied connected documents. Monitor for updates from official advisories; no affected product versions, exploitation status, or remediation are specified here.

CVE-2017-15616

Technical details for CVE-2017-15616 are not publicly available in the provided documents. No confirmed affected products, versions, or exploit information are present here. Monitor for updates to the CVE entry and connected sources.