CVE-2017-16958
Severity Score
8.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/bridge command to cgi-bin/luci, related to the get_device_byif function in /usr/lib/lua/luci/controller/admin/bridge.lua in uhttpd.
Los dispositivos TP-Link TL-WVR, TL-WAR, TL-ER y TL-R permiten que usuarios autenticados remotos ejecuten comandos arbitrarios mediante metacaracteres shell en el campo t_bindif de un comando admin/bridge en cgi-bin/luci. Esto se relaciona con la función get_device_byif en /usr/lib/lua/luci/controller/admin/bridge.lua en uhttpd.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2017-11-27 CVE Reserved
- 2017-11-27 CVE Published
- 2024-01-23 EPSS Updated
- 2024-08-05 CVE Updated
- 2024-08-05 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|---|---|
| https://github.com/coincoin7/Wireless-Router-Vulnerability/blob/master/TplinkBridgeAuthenticatedRCE.txt | 2024-08-05 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Tp-link Search vendor "Tp-link" | Tl-wvr300 Firmware Search vendor "Tp-link" for product "Tl-wvr300 Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-wvr300 Search vendor "Tp-link" for product "Tl-wvr300" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-wvr302 Firmware Search vendor "Tp-link" for product "Tl-wvr302 Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-wvr302 Search vendor "Tp-link" for product "Tl-wvr302" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-wvr450 Firmware Search vendor "Tp-link" for product "Tl-wvr450 Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-wvr450 Search vendor "Tp-link" for product "Tl-wvr450" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-wvr450l Firmware Search vendor "Tp-link" for product "Tl-wvr450l Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-wvr450l Search vendor "Tp-link" for product "Tl-wvr450l" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-wvr450g Firmware Search vendor "Tp-link" for product "Tl-wvr450g Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-wvr450g Search vendor "Tp-link" for product "Tl-wvr450g" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-wvr458 Firmware Search vendor "Tp-link" for product "Tl-wvr458 Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-wvr458 Search vendor "Tp-link" for product "Tl-wvr458" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-wvr458l Firmware Search vendor "Tp-link" for product "Tl-wvr458l Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-wvr458l Search vendor "Tp-link" for product "Tl-wvr458l" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-wvr458p Firmware Search vendor "Tp-link" for product "Tl-wvr458p Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-wvr458p Search vendor "Tp-link" for product "Tl-wvr458p" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-wvr900g Firmware Search vendor "Tp-link" for product "Tl-wvr900g Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-wvr900g Search vendor "Tp-link" for product "Tl-wvr900g" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-wvr900l Firmware Search vendor "Tp-link" for product "Tl-wvr900l Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-wvr900l Search vendor "Tp-link" for product "Tl-wvr900l" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-wvr1200l Firmware Search vendor "Tp-link" for product "Tl-wvr1200l Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-wvr1200l Search vendor "Tp-link" for product "Tl-wvr1200l" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-wvr1300l Firmware Search vendor "Tp-link" for product "Tl-wvr1300l Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-wvr1300l Search vendor "Tp-link" for product "Tl-wvr1300l" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-wvr1300g Firmware Search vendor "Tp-link" for product "Tl-wvr1300g Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-war1300g Search vendor "Tp-link" for product "Tl-war1300g" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-wvr1750l Firmware Search vendor "Tp-link" for product "Tl-wvr1750l Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-wvr1750l Search vendor "Tp-link" for product "Tl-wvr1750l" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-war2600l Firmware Search vendor "Tp-link" for product "Tl-war2600l Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-wvr2600l Search vendor "Tp-link" for product "Tl-wvr2600l" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-wvr4300l Firmware Search vendor "Tp-link" for product "Tl-wvr4300l Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-wvr4300l Search vendor "Tp-link" for product "Tl-wvr4300l" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-war302 Firmware Search vendor "Tp-link" for product "Tl-war302 Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-war302 Search vendor "Tp-link" for product "Tl-war302" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-war450 Firmware Search vendor "Tp-link" for product "Tl-war450 Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-war450 Search vendor "Tp-link" for product "Tl-war450" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-war450l Firmware Search vendor "Tp-link" for product "Tl-war450l Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-war450l Search vendor "Tp-link" for product "Tl-war450l" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-war458 Firmware Search vendor "Tp-link" for product "Tl-war458 Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-war458 Search vendor "Tp-link" for product "Tl-war458" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-war458l Firmware Search vendor "Tp-link" for product "Tl-war458l Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-war458l Search vendor "Tp-link" for product "Tl-war458l" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-war900l Firmware Search vendor "Tp-link" for product "Tl-war900l Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-war900l Search vendor "Tp-link" for product "Tl-war900l" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-war1200l Firmware Search vendor "Tp-link" for product "Tl-war1200l Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-war1200l Search vendor "Tp-link" for product "Tl-war1200l" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-war1300l Firmware Search vendor "Tp-link" for product "Tl-war1300l Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-war1300l Search vendor "Tp-link" for product "Tl-war1300l" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-war1750l Firmware Search vendor "Tp-link" for product "Tl-war1750l Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-war1750l Search vendor "Tp-link" for product "Tl-war1750l" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-war2600l Firmware Search vendor "Tp-link" for product "Tl-war2600l Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-war2600l Search vendor "Tp-link" for product "Tl-war2600l" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-er3210g Firmware Search vendor "Tp-link" for product "Tl-er3210g Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-er3210g Search vendor "Tp-link" for product "Tl-er3210g" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-er3220g Firmware Search vendor "Tp-link" for product "Tl-er3220g Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-er3220g Search vendor "Tp-link" for product "Tl-er3220g" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-er5110g Firmware Search vendor "Tp-link" for product "Tl-er5110g Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-er5110g Search vendor "Tp-link" for product "Tl-er5110g" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-er5120g Firmware Search vendor "Tp-link" for product "Tl-er5120g Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-er5120g Search vendor "Tp-link" for product "Tl-er5120g" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-er5510g Firmware Search vendor "Tp-link" for product "Tl-er5510g Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-er5510g Search vendor "Tp-link" for product "Tl-er5510g" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-er5520g Firmware Search vendor "Tp-link" for product "Tl-er5520g Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-er5520g Search vendor "Tp-link" for product "Tl-er5520g" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-er6110g Firmware Search vendor "Tp-link" for product "Tl-er6110g Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-er6110g Search vendor "Tp-link" for product "Tl-er6110g" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-er6120g Firmware Search vendor "Tp-link" for product "Tl-er6120g Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-er6120g Search vendor "Tp-link" for product "Tl-er6120g" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-er6220g Firmware Search vendor "Tp-link" for product "Tl-er6220g Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-er6220g Search vendor "Tp-link" for product "Tl-er6220g" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-er6510g Firmware Search vendor "Tp-link" for product "Tl-er6510g Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-er6510g Search vendor "Tp-link" for product "Tl-er6510g" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-er6520g Firmware Search vendor "Tp-link" for product "Tl-er6520g Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-er6520g Search vendor "Tp-link" for product "Tl-er6520g" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-er7520g Firmware Search vendor "Tp-link" for product "Tl-er7520g Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-er7520g Search vendor "Tp-link" for product "Tl-er7520g" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-r473 Firmware Search vendor "Tp-link" for product "Tl-r473 Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-r473 Search vendor "Tp-link" for product "Tl-r473" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-r473g Firmware Search vendor "Tp-link" for product "Tl-r473g Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-r473g Search vendor "Tp-link" for product "Tl-r473g" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-r473p-ac Firmware Search vendor "Tp-link" for product "Tl-r473p-ac Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-r473p-ac Search vendor "Tp-link" for product "Tl-r473p-ac" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-r479gp-ac Firmware Search vendor "Tp-link" for product "Tl-r479gp-ac Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-r473gp-ac Search vendor "Tp-link" for product "Tl-r473gp-ac" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-r478 Firmware Search vendor "Tp-link" for product "Tl-r478 Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-r478 Search vendor "Tp-link" for product "Tl-r478" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-r478\+ Firmware Search vendor "Tp-link" for product "Tl-r478\+ Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-r478\+ Search vendor "Tp-link" for product "Tl-r478\+" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-r478g Firmware Search vendor "Tp-link" for product "Tl-r478g Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-r478g Search vendor "Tp-link" for product "Tl-r478g" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-r478g\+ Firmware Search vendor "Tp-link" for product "Tl-r478g\+ Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-r478g\+ Search vendor "Tp-link" for product "Tl-r478g\+" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-r479p-ac Firmware Search vendor "Tp-link" for product "Tl-r479p-ac Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-r479p-ac Search vendor "Tp-link" for product "Tl-r479p-ac" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-r479gp-ac Firmware Search vendor "Tp-link" for product "Tl-r479gp-ac Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-r479gp-ac Search vendor "Tp-link" for product "Tl-r479gp-ac" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-r479gpe-ac Firmware Search vendor "Tp-link" for product "Tl-r479gpe-ac Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-r479gpe-ac Search vendor "Tp-link" for product "Tl-r479gpe-ac" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-r483 Firmware Search vendor "Tp-link" for product "Tl-r483 Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-r483 Search vendor "Tp-link" for product "Tl-r483" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-r483g Firmware Search vendor "Tp-link" for product "Tl-r483g Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-r483g Search vendor "Tp-link" for product "Tl-r483g" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-r488 Firmware Search vendor "Tp-link" for product "Tl-r488 Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-r488 Search vendor "Tp-link" for product "Tl-r488" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-r4149g Firmware Search vendor "Tp-link" for product "Tl-r4149g Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-r4149g Search vendor "Tp-link" for product "Tl-r4149g" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-r4239g Firmware Search vendor "Tp-link" for product "Tl-r4239g Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-r4239g Search vendor "Tp-link" for product "Tl-r4239g" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-r4299g Firmware Search vendor "Tp-link" for product "Tl-r4299g Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-r4299g Search vendor "Tp-link" for product "Tl-r4299g" | - | - |
Safe
|