CVE-2017-16957
TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the iface field of an admin/diagnostic command to cgi-bin/luci, related to the zone_get_effect_devices function in /usr/lib/lua/luci/controller/admin/diagnostic.lua in uhttpd.
- Score
- CVSS 3.0 8.8 High
- Status
- Modified - cve@mitre.org
- Published
- 2017-11-27
- Last modified
- 2024-08-05
- Weaknesses
- CWE-78
Affected products
- Tl-er3210g Firmware (Tp-link)
- Tl-er3220g Firmware (Tp-link)
- Tl-er5110g Firmware (Tp-link)
- Tl-er5120g Firmware (Tp-link)
- Tl-er5510g Firmware (Tp-link)
- Tl-er5520g Firmware (Tp-link)
- Tl-er6110g Firmware (Tp-link)
- Tl-er6120g Firmware (Tp-link)
- Tl-er6220g Firmware (Tp-link)
- Tl-er6510g Firmware (Tp-link)
- Tl-er6520g Firmware (Tp-link)
- Tl-er7520g Firmware (Tp-link)
- Tl-r4149g Firmware (Tp-link)
- Tl-r4239g Firmware (Tp-link)
- Tl-r4299g Firmware (Tp-link)
- Tl-r473 Firmware (Tp-link)
- Tl-r473g Firmware (Tp-link)
- Tl-r473p-ac Firmware (Tp-link)
- Tl-r478+ Firmware (Tp-link)
- Tl-r478 Firmware (Tp-link)
- Tl-r478g+ Firmware (Tp-link)
- Tl-r478g Firmware (Tp-link)
- Tl-r479gp-ac Firmware (Tp-link)
- Tl-r479gpe-ac Firmware (Tp-link)
- Tl-r479p-ac Firmware (Tp-link)
- Tl-r483 Firmware (Tp-link)
- Tl-r483g Firmware (Tp-link)
- Tl-r488 Firmware (Tp-link)
- Tl-war1200l Firmware (Tp-link)
- Tl-war1300l Firmware (Tp-link)
- Tl-war1750l Firmware (Tp-link)
- Tl-war2600l Firmware (Tp-link)
- Tl-war302 Firmware (Tp-link)
- Tl-war450 Firmware (Tp-link)
- Tl-war450l Firmware (Tp-link)
- Tl-war458 Firmware (Tp-link)
- Tl-war458l Firmware (Tp-link)
- Tl-war900l Firmware (Tp-link)
- Tl-wvr1200l Firmware (Tp-link)
- Tl-wvr1300g Firmware (Tp-link)
- Tl-wvr1300l Firmware (Tp-link)
- Tl-wvr1750l Firmware (Tp-link)
- Tl-wvr300 Firmware (Tp-link)
- Tl-wvr302 Firmware (Tp-link)
- Tl-wvr4300l Firmware (Tp-link)
- Tl-wvr450 Firmware (Tp-link)
- Tl-wvr450g Firmware (Tp-link)
- Tl-wvr450l Firmware (Tp-link)
- Tl-wvr458 Firmware (Tp-link)
- Tl-wvr458l Firmware (Tp-link)
- Tl-wvr458p Firmware (Tp-link)
- Tl-wvr900g Firmware (Tp-link)
- Tl-wvr900l Firmware (Tp-link)
References
- http://www.securityfocus.com/bid/101968
- https://github.com/coincoin7/Wireless-Router-Vulnerability/blob/master/TplinkDiagnosticAuthenticatedRCE.txt
