Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2017-15632

TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-mppeencryption variable in the pptp_server.lua file.

Published

2018-01-11T16:29:01.237

Last Modified

2024-11-21T03:14:54.737

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 7.2 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

8.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System tp-link er5110g_firmware - Yes
Hardware tp-link er5110g - No
Operating System tp-link er5120g_firmware - Yes
Hardware tp-link er5120g - No
Operating System tp-link er5510g_firmware - Yes
Hardware tp-link er5510g - No
Operating System tp-link er5520g_firmware - Yes
Hardware tp-link er5520g - No
Operating System tp-link r4149g_firmware - Yes
Hardware tp-link r4149g - No
Operating System tp-link r4239g_firmware - Yes
Hardware tp-link r4239g - No
Operating System tp-link r4299g_firmware - Yes
Hardware tp-link r4299g - No
Operating System tp-link r473gp-ac_firmware - Yes
Hardware tp-link r473gp-ac - No
Operating System tp-link r473g_firmware - Yes
Hardware tp-link r473g - No
Operating System tp-link r473p-ac_firmware - Yes
Hardware tp-link r473p-ac - No
Operating System tp-link r473_firmware - Yes
Hardware tp-link r473 - No
Operating System tp-link r478g\+_firmware - Yes
Hardware tp-link r478g\+ - No
Operating System tp-link r478_firmware - Yes
Hardware tp-link r478 - No
Operating System tp-link r478\+_firmware - Yes
Hardware tp-link r478\+ - No
Operating System tp-link r483g_firmware - Yes
Hardware tp-link r483g - No
Operating System tp-link r483_firmware - Yes
Hardware tp-link r483 - No
Operating System tp-link r488_firmware - Yes
Hardware tp-link r488 - No
Operating System tp-link war1300l_firmware - Yes
Hardware tp-link war1300l - No
Operating System tp-link war1750l_firmware - Yes
Hardware tp-link war1750l - No
Operating System tp-link war2600l_firmware - Yes
Hardware tp-link war2600l - No
Operating System tp-link war302_firmware - Yes
Hardware tp-link war302 - No
Operating System tp-link war450l_firmware - Yes
Hardware tp-link war450l - No
Operating System tp-link war450_firmware - Yes
Hardware tp-link war450 - No
Operating System tp-link war458l_firmware - Yes
Hardware tp-link war458l - No
Operating System tp-link war458_firmware - Yes
Hardware tp-link war458 - No
Operating System tp-link war900l_firmware - Yes
Hardware tp-link war900l - No
Operating System tp-link wvr1300g_firmware - Yes
Hardware tp-link wvr1300g - No
Operating System tp-link wvr1300l_firmware - Yes
Hardware tp-link wvr1300l - No
Operating System tp-link wvr1750l_firmware - Yes
Hardware tp-link wvr1750l - No
Operating System tp-link wvr2600l_firmware - Yes
Hardware tp-link wvr2600l - No
Operating System tp-link wvr300_firmware - Yes
Hardware tp-link wvr300 - No
Operating System tp-link wvr302_firmware - Yes
Hardware tp-link wvr302 - No
Operating System tp-link wvr4300l_firmware - Yes
Hardware tp-link wvr4300l - No
Operating System tp-link wvr450l_firmware 1.0161125 Yes
Hardware tp-link wvr450l - No
Operating System tp-link wvr450_firmware - Yes
Hardware tp-link wvr450 - No
Operating System tp-link wvr458l_firmware - Yes
Hardware tp-link wvr458l - No
Operating System tp-link wvr900g_firmware 3.0_170306 Yes
Hardware tp-link wvr900g - No
Operating System tp-link wvr900l_firmware - Yes
Hardware tp-link wvr900l - No
References