|
2017-11-27
|
CVE-2017-16960
|
TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/interface command to cgi-bin/luci, related to the get_device_byif function in /usr/lib/lua/luci/controller/admin/interface.lua in uhttpd.
|
Tl\-Er3210g_firmware, Tl\-Er3220g_firmware, Tl\-Er5110g_firmware, Tl\-Er5120g_firmware, Tl\-Er5510g, Tl\-Er5520g, Tl\-Er6110g_firmware, Tl\-Er6120g, Tl\-Er6220g_firmware, Tl\-Er6510g_firmware, Tl\-Er6520g, Tl\-Er7520g_firmware, Tl\-R4149g_firmware, Tl\-R4239g, Tl\-R4299g, Tl\-R473, Tl\-R473g_firmware, Tl\-R473gp\-Ac_firmware, Tl\-R473p\-Ac_firmware, Tl\-R478, Tl\-R478\+, Tl\-R478g\+, Tl\-R478g_firmware, Tl\-R479gp\-Ac_firmware, Tl\-R479gpe\-Ac_firmware, Tl\-R479p\-Ac_firmware, Tl\-R483, Tl\-R483g, Tl\-R488, Tl\-War1200l_firmware, Tl\-War1300l_firmware, Tl\-War1750l_firmware, Tl\-War2600l_firmware, Tl\-War302_firmware, Tl\-War450_firmware, Tl\-War450l_firmware, Tl\-War458_firmware, Tl\-War458l_firmware, Tl\-War900l_firmware, Tl\-Wvr1200l_firmware, Tl\-Wvr1300g_firmware, Tl\-Wvr1300l_firmware, Tl\-Wvr1750l_firmware, Tl\-Wvr2600l_firmware, Tl\-Wvr300, Tl\-Wvr302, Tl\-Wvr4300l_firmware, Tl\-Wvr450_firmware, Tl\-Wvr450g, Tl\-Wvr450l_firmware, Tl\-Wvr458_firmware, Tl\-Wvr458l_firmware, Tl\-Wvr458p_firmware, Tl\-Wvr900g, Tl\-Wvr900l_firmware
|
8.8
|
|
|