CVE-2017-16960
TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/interface command to cgi-bin/luci, related to the get_device_byif function in /usr/lib/lua/luci/controller/admin/interface.lua in uhttpd.
- Score
- CVSS 3.0 8.8 High
- Status
- Modified - cve@mitre.org
- Published
- 2017-11-27
- Last modified
- 2024-08-05
- Weaknesses
- CWE-78
Affected products
- Tl-er3210g Firmware (Tp-link)
- Tl-er3220g Firmware (Tp-link)
- Tl-er5110g Firmware (Tp-link)
- Tl-er5120g Firmware (Tp-link)
- Tl-er5510g (Tp-link)
- Tl-er5520g (Tp-link)
- Tl-er6110g Firmware (Tp-link)
- Tl-er6120g (Tp-link)
- Tl-er6220g Firmware (Tp-link)
- Tl-er6510g Firmware (Tp-link)
- Tl-er6520g (Tp-link)
- Tl-er7520g Firmware (Tp-link)
- Tl-r4149g Firmware (Tp-link)
- Tl-r4239g (Tp-link)
- Tl-r4299g (Tp-link)
- Tl-r473 (Tp-link)
- Tl-r473g Firmware (Tp-link)
- Tl-r473gp-ac Firmware (Tp-link)
- Tl-r473p-ac Firmware (Tp-link)
- Tl-r478 (Tp-link)
- Tl-r478+ (Tp-link)
- Tl-r478g+ (Tp-link)
- Tl-r478g Firmware (Tp-link)
- Tl-r479gp-ac Firmware (Tp-link)
- Tl-r479gpe-ac Firmware (Tp-link)
- Tl-r479p-ac Firmware (Tp-link)
- Tl-r483 (Tp-link)
- Tl-r483g (Tp-link)
- Tl-r488 (Tp-link)
- Tl-war1200l Firmware (Tp-link)
- Tl-war1300l Firmware (Tp-link)
- Tl-war1750l Firmware (Tp-link)
- Tl-war2600l Firmware (Tp-link)
- Tl-war302 Firmware (Tp-link)
- Tl-war450 Firmware (Tp-link)
- Tl-war450l Firmware (Tp-link)
- Tl-war458 Firmware (Tp-link)
- Tl-war458l Firmware (Tp-link)
- Tl-war900l Firmware (Tp-link)
- Tl-wvr1200l Firmware (Tp-link)
- Tl-wvr1300g Firmware (Tp-link)
- Tl-wvr1300l Firmware (Tp-link)
- Tl-wvr1750l Firmware (Tp-link)
- Tl-wvr2600l Firmware (Tp-link)
- Tl-wvr300 (Tp-link)
- Tl-wvr302 (Tp-link)
- Tl-wvr4300l Firmware (Tp-link)
- Tl-wvr450 Firmware (Tp-link)
- Tl-wvr450g (Tp-link)
- Tl-wvr450l Firmware (Tp-link)
- Tl-wvr458 Firmware (Tp-link)
- Tl-wvr458l Firmware (Tp-link)
- Tl-wvr458p Firmware (Tp-link)
- Tl-wvr900g (Tp-link)
- Tl-wvr900l Firmware (Tp-link)
References
- https://github.com/coincoin7/Wireless-Router-Vulnerability/blob/master/TplinkInterfaceAuthenticatedRCE.txt
