CVE-2017-17757
TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the interface field of an admin/wportal command to cgi-bin/luci, related to the get_device_byif function in /usr/lib/lua/luci/controller/admin/wportal.lua in uhttpd.
- Score
- CVSS 3.0 8.8 High
- Status
- Modified - cve@mitre.org
- Published
- 2017-12-19
- Last modified
- 2024-08-05
- Weaknesses
- CWE-78
Affected products
- Tl-war1200l Firmware (Tp-link)
- Tl-war1300l Firmware (Tp-link)
- Tl-war1750l Firmware (Tp-link)
- Tl-war2600l Firmware (Tp-link)
- Tl-war450l Firmware (Tp-link)
- Tl-war458l Firmware (Tp-link)
- Tl-war900l Firmware (Tp-link)
- Tl-wvr1200l Firmware (Tp-link)
- Tl-wvr1300l Firmware (Tp-link)
- Tl-wvr1750l Firmware (Tp-link)
- Tl-wvr2600l Firmware (Tp-link)
- Tl-wvr4300l Firmware (Tp-link)
- Tl-wvr450l Firmware (Tp-link)
- Tl-wvr458l Firmware (Tp-link)
- Tl-wvr900l Firmware (Tp-link)
References
- https://github.com/L1ZhaoXin/Router-Vulnerability-Research/blob/master/Tplink_LUCI_Wechat_Authenticated_RCE_Record.txt
