CVE-2017-15627 : TP-Link WVR, WAR and ER devices allow remote authenticated administrators to exe

TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-pns variable in the pptp_client.lua file.

Published 2018-01-11 16:29:01

Updated 2019-10-03 00:03:26

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2017-15627

Tp-link » Er5110g Firmware » Version: N/A
cpe:2.3:o:tp-link:er5110g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » Er5110g » Version: N/A
Tp-link » Er5120g Firmware » Version: N/A
cpe:2.3:o:tp-link:er5120g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » Er5120g » Version: N/A
Tp-link » Er5510g Firmware » Version: N/A
cpe:2.3:o:tp-link:er5510g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » Er5510g » Version: N/A
Tp-link » Er5520g Firmware » Version: N/A
cpe:2.3:o:tp-link:er5520g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » Er5520g » Version: N/A
Tp-link » R4149g Firmware » Version: N/A
cpe:2.3:o:tp-link:r4149g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » R4149g » Version: N/A
Tp-link » R4239g Firmware » Version: N/A
cpe:2.3:o:tp-link:r4239g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » R4239g » Version: N/A
Tp-link » R4299g Firmware » Version: N/A
cpe:2.3:o:tp-link:r4299g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » R4299g » Version: N/A
Tp-link » R473gp-ac Firmware » Version: N/A
cpe:2.3:o:tp-link:r473gp-ac_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » R473gp-ac » Version: N/A
Tp-link » R473g Firmware » Version: N/A
cpe:2.3:o:tp-link:r473g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » R473g » Version: N/A
Tp-link » R473p-ac Firmware » Version: N/A
cpe:2.3:o:tp-link:r473p-ac_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » R473p-ac » Version: N/A
Tp-link » R473 Firmware » Version: N/A
cpe:2.3:o:tp-link:r473_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » R473 » Version: N/A
Tp-link » R478g+ Firmware » Version: N/A
cpe:2.3:o:tp-link:r478g\+_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » R478g+ » Version: N/A
Tp-link » R478 Firmware » Version: N/A
cpe:2.3:o:tp-link:r478_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » R478 » Version: N/A
Tp-link » R478+ Firmware » Version: N/A
cpe:2.3:o:tp-link:r478\+_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » R478+ » Version: N/A
Tp-link » R483g Firmware » Version: N/A
cpe:2.3:o:tp-link:r483g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » R483g » Version: N/A
Tp-link » R483 Firmware » Version: N/A
cpe:2.3:o:tp-link:r483_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » R483 » Version: N/A
Tp-link » R488 Firmware » Version: N/A
cpe:2.3:o:tp-link:r488_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » R488 » Version: N/A
Tp-link » War1300l Firmware » Version: N/A
cpe:2.3:o:tp-link:war1300l_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » War1300l » Version: N/A
Tp-link » War1750l Firmware » Version: N/A
cpe:2.3:o:tp-link:war1750l_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » War1750l » Version: N/A
Tp-link » War2600l Firmware » Version: N/A
cpe:2.3:o:tp-link:war2600l_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » War2600l » Version: N/A
Tp-link » War302 Firmware » Version: N/A
cpe:2.3:o:tp-link:war302_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » War302 » Version: N/A
Tp-link » War450l Firmware » Version: N/A
cpe:2.3:o:tp-link:war450l_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » War450l » Version: N/A
Tp-link » War450 Firmware » Version: N/A
cpe:2.3:o:tp-link:war450_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » War450 » Version: N/A
Tp-link » War458l Firmware » Version: N/A
cpe:2.3:o:tp-link:war458l_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » War458l » Version: N/A
Tp-link » War458 Firmware » Version: N/A
cpe:2.3:o:tp-link:war458_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » War458 » Version: N/A
Tp-link » War900l Firmware » Version: N/A
cpe:2.3:o:tp-link:war900l_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » War900l » Version: N/A
Tp-link » Wvr1300g Firmware » Version: N/A
cpe:2.3:o:tp-link:wvr1300g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » Wvr1300g » Version: N/A
Tp-link » Wvr1300l Firmware » Version: N/A
cpe:2.3:o:tp-link:wvr1300l_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » Wvr1300l » Version: N/A
Tp-link » Wvr1750l Firmware » Version: N/A
cpe:2.3:o:tp-link:wvr1750l_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » Wvr1750l » Version: N/A
Tp-link » Wvr2600l Firmware » Version: N/A
cpe:2.3:o:tp-link:wvr2600l_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » Wvr2600l » Version: N/A
Tp-link » Wvr300 Firmware » Version: N/A
cpe:2.3:o:tp-link:wvr300_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » Wvr300 » Version: N/A
Tp-link » Wvr302 Firmware » Version: N/A
cpe:2.3:o:tp-link:wvr302_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » Wvr302 » Version: N/A
Tp-link » Wvr4300l Firmware » Version: N/A
cpe:2.3:o:tp-link:wvr4300l_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » Wvr4300l » Version: N/A
Tp-link » Wvr450l Firmware » Version: 1.0161125
cpe:2.3:o:tp-link:wvr450l_firmware:1.0161125:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » Wvr450l » Version: N/A
Tp-link » Wvr450 Firmware » Version: N/A
cpe:2.3:o:tp-link:wvr450_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » Wvr450 » Version: N/A
Tp-link » Wvr458l Firmware » Version: N/A
cpe:2.3:o:tp-link:wvr458l_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » Wvr458l » Version: N/A
Tp-link » Wvr900g Firmware » Version: 3.0 170306
cpe:2.3:o:tp-link:wvr900g_firmware:3.0_170306:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » Wvr900g » Version: N/A
Tp-link » Wvr900l Firmware » Version: N/A
cpe:2.3:o:tp-link:wvr900l_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Tp-link » Wvr900l » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2017-15627

EPSS FAQ

0.14%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 49 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2017-15627

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
9.0	HIGH	AV:N/AC:L/Au:S/C:C/I:C/A:C	8.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
7.2	HIGH	CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	1.2	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

References for CVE-2017-15627

http://www.securityfocus.com/archive/1/541655/100/0/threaded

SecurityFocus
Exploit;Third Party Advisory;VDB Entry

CVEs referencing this url
https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt

Vulnerability/CVE-2017-15613_to_CVE-2017-15637.txt at master · chunibalon/Vulnerability · GitHub
Exploit;Third Party Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2017-15627

Products affected by CVE-2017-15627

Exploit prediction scoring system (EPSS) score for CVE-2017-15627

CVSS scores for CVE-2017-15627

References for CVE-2017-15627