CVE-2017-16960
Severity Score
8.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/interface command to cgi-bin/luci, related to the get_device_byif function in /usr/lib/lua/luci/controller/admin/interface.lua in uhttpd.
Los dispositivos TP-Link TL-WVR, TL-WAR, TL-ER y TL-R permiten que usuarios autenticados remotos ejecuten comandos arbitrarios mediante metacaracteres shell en el campo t_bindif de un comando admin/interface en cgi-bin/luci. Esto se relaciona con la función get_device_byif en /usr/lib/lua/luci/controller/admin/interface.lua en uhttpd.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2017-11-27 CVE Reserved
- 2017-11-27 CVE Published
- 2024-01-23 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CAPEC
References (1)
| URL | Tag | Source |
|---|---|---|
| https://github.com/coincoin7/Wireless-Router-Vulnerability/blob/master/TplinkInterfaceAuthenticatedRCE.txt | Issue Tracking |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Tp-link Search vendor "Tp-link" | Tl-wvr450 Firmware Search vendor "Tp-link" for product "Tl-wvr450 Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-wvr450 Search vendor "Tp-link" for product "Tl-wvr450" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-wvr450l Firmware Search vendor "Tp-link" for product "Tl-wvr450l Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-wvr450l Search vendor "Tp-link" for product "Tl-wvr450l" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-wvr458 Firmware Search vendor "Tp-link" for product "Tl-wvr458 Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-wvr458 Search vendor "Tp-link" for product "Tl-wvr458" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-wvr458l Firmware Search vendor "Tp-link" for product "Tl-wvr458l Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-wvr458l Search vendor "Tp-link" for product "Tl-wvr458l" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-wvr458p Firmware Search vendor "Tp-link" for product "Tl-wvr458p Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-wvr458p Search vendor "Tp-link" for product "Tl-wvr458p" | * | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-wvr900l Firmware Search vendor "Tp-link" for product "Tl-wvr900l Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-wvr900l Search vendor "Tp-link" for product "Tl-wvr900l" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-wvr1200l Firmware Search vendor "Tp-link" for product "Tl-wvr1200l Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-wvr1200l Search vendor "Tp-link" for product "Tl-wvr1200l" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-wvr1300l Firmware Search vendor "Tp-link" for product "Tl-wvr1300l Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-wvr1300l Search vendor "Tp-link" for product "Tl-wvr1300l" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-wvr1300g Firmware Search vendor "Tp-link" for product "Tl-wvr1300g Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-wvr1300g Search vendor "Tp-link" for product "Tl-wvr1300g" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-wvr1750l Firmware Search vendor "Tp-link" for product "Tl-wvr1750l Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-wvr1750l Search vendor "Tp-link" for product "Tl-wvr1750l" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-wvr2600l Firmware Search vendor "Tp-link" for product "Tl-wvr2600l Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-wvr2600l Search vendor "Tp-link" for product "Tl-wvr2600l" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-wvr4300l Firmware Search vendor "Tp-link" for product "Tl-wvr4300l Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-wvr4300l Search vendor "Tp-link" for product "Tl-wvr4300l" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-war302 Firmware Search vendor "Tp-link" for product "Tl-war302 Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-war302 Search vendor "Tp-link" for product "Tl-war302" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-war450 Firmware Search vendor "Tp-link" for product "Tl-war450 Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-war450 Search vendor "Tp-link" for product "Tl-war450" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-war450l Firmware Search vendor "Tp-link" for product "Tl-war450l Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-war450l Search vendor "Tp-link" for product "Tl-war450l" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-war458 Firmware Search vendor "Tp-link" for product "Tl-war458 Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-war458 Search vendor "Tp-link" for product "Tl-war458" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-war458l Firmware Search vendor "Tp-link" for product "Tl-war458l Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-war458l Search vendor "Tp-link" for product "Tl-war458l" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-war900l Firmware Search vendor "Tp-link" for product "Tl-war900l Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-war900l Search vendor "Tp-link" for product "Tl-war900l" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-war1200l Firmware Search vendor "Tp-link" for product "Tl-war1200l Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-war1200l Search vendor "Tp-link" for product "Tl-war1200l" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-war1300l Firmware Search vendor "Tp-link" for product "Tl-war1300l Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-war1300l Search vendor "Tp-link" for product "Tl-war1300l" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-war1750l Firmware Search vendor "Tp-link" for product "Tl-war1750l Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-war1750l Search vendor "Tp-link" for product "Tl-war1750l" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-war2600l Firmware Search vendor "Tp-link" for product "Tl-war2600l Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-war2600l Search vendor "Tp-link" for product "Tl-war2600l" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-er3210g Firmware Search vendor "Tp-link" for product "Tl-er3210g Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-er3210g Search vendor "Tp-link" for product "Tl-er3210g" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-er3220g Firmware Search vendor "Tp-link" for product "Tl-er3220g Firmware" | * | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-er3220g Search vendor "Tp-link" for product "Tl-er3220g" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-er5110g Firmware Search vendor "Tp-link" for product "Tl-er5110g Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-er5110g Search vendor "Tp-link" for product "Tl-er5110g" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-er5120g Firmware Search vendor "Tp-link" for product "Tl-er5120g Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-er5120g Search vendor "Tp-link" for product "Tl-er5120g" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-er6110g Firmware Search vendor "Tp-link" for product "Tl-er6110g Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-er6110g Search vendor "Tp-link" for product "Tl-er6110g" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-er6220g Firmware Search vendor "Tp-link" for product "Tl-er6220g Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-er6220g Search vendor "Tp-link" for product "Tl-er6220g" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-er6510g Firmware Search vendor "Tp-link" for product "Tl-er6510g Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-er6510g Search vendor "Tp-link" for product "Tl-er6510g" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-er7520g Firmware Search vendor "Tp-link" for product "Tl-er7520g Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-er7520g Search vendor "Tp-link" for product "Tl-er7520g" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-r473g Firmware Search vendor "Tp-link" for product "Tl-r473g Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-r473g Search vendor "Tp-link" for product "Tl-r473g" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-r473p-ac Firmware Search vendor "Tp-link" for product "Tl-r473p-ac Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-r473p-ac Search vendor "Tp-link" for product "Tl-r473p-ac" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-r473gp-ac Firmware Search vendor "Tp-link" for product "Tl-r473gp-ac Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-r473gp-ac Search vendor "Tp-link" for product "Tl-r473gp-ac" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-r478g Firmware Search vendor "Tp-link" for product "Tl-r478g Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-r478g Search vendor "Tp-link" for product "Tl-r478g" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-r478g Firmware Search vendor "Tp-link" for product "Tl-r478g Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-r478g Search vendor "Tp-link" for product "Tl-r478g" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-r479p-ac Firmware Search vendor "Tp-link" for product "Tl-r479p-ac Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-r479p-ac Search vendor "Tp-link" for product "Tl-r479p-ac" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-r479gp-ac Firmware Search vendor "Tp-link" for product "Tl-r479gp-ac Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-r479gp-ac Search vendor "Tp-link" for product "Tl-r479gp-ac" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-r479gpe-ac Firmware Search vendor "Tp-link" for product "Tl-r479gpe-ac Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-r479gpe-ac Search vendor "Tp-link" for product "Tl-r479gpe-ac" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-r4149g Firmware Search vendor "Tp-link" for product "Tl-r4149g Firmware" | - | - |
Affected
| in | Tp-link Search vendor "Tp-link" | Tl-r4149g Search vendor "Tp-link" for product "Tl-r4149g" | - | - |
Safe
|
| Tp-link Search vendor "Tp-link" | Tl-er5510g Search vendor "Tp-link" for product "Tl-er5510g" | v2 Search vendor "Tp-link" for product "Tl-er5510g" and version "v2" | - |
Affected
| ||||||
| Tp-link Search vendor "Tp-link" | Tl-er5510g Search vendor "Tp-link" for product "Tl-er5510g" | v3 Search vendor "Tp-link" for product "Tl-er5510g" and version "v3" | - |
Affected
| ||||||
| Tp-link Search vendor "Tp-link" | Tl-er5520g Search vendor "Tp-link" for product "Tl-er5520g" | v2 Search vendor "Tp-link" for product "Tl-er5520g" and version "v2" | - |
Affected
| ||||||
| Tp-link Search vendor "Tp-link" | Tl-er5520g Search vendor "Tp-link" for product "Tl-er5520g" | v3 Search vendor "Tp-link" for product "Tl-er5520g" and version "v3" | - |
Affected
| ||||||
| Tp-link Search vendor "Tp-link" | Tl-er6120g Search vendor "Tp-link" for product "Tl-er6120g" | v2 Search vendor "Tp-link" for product "Tl-er6120g" and version "v2" | - |
Affected
| ||||||
| Tp-link Search vendor "Tp-link" | Tl-er6520g Search vendor "Tp-link" for product "Tl-er6520g" | v2 Search vendor "Tp-link" for product "Tl-er6520g" and version "v2" | - |
Affected
| ||||||
| Tp-link Search vendor "Tp-link" | Tl-er6520g Search vendor "Tp-link" for product "Tl-er6520g" | v3 Search vendor "Tp-link" for product "Tl-er6520g" and version "v3" | - |
Affected
| ||||||
| Tp-link Search vendor "Tp-link" | Tl-r4239g Search vendor "Tp-link" for product "Tl-r4239g" | v2 Search vendor "Tp-link" for product "Tl-r4239g" and version "v2" | - |
Affected
| ||||||
| Tp-link Search vendor "Tp-link" | Tl-r4299g Search vendor "Tp-link" for product "Tl-r4299g" | v2 Search vendor "Tp-link" for product "Tl-r4299g" and version "v2" | - |
Affected
| ||||||
| Tp-link Search vendor "Tp-link" | Tl-r473 Search vendor "Tp-link" for product "Tl-r473" | v5 Search vendor "Tp-link" for product "Tl-r473" and version "v5" | - |
Affected
| ||||||
| Tp-link Search vendor "Tp-link" | Tl-r478 Search vendor "Tp-link" for product "Tl-r478" | v6 Search vendor "Tp-link" for product "Tl-r478" and version "v6" | - |
Affected
| ||||||
| Tp-link Search vendor "Tp-link" | Tl-r478\+ Search vendor "Tp-link" for product "Tl-r478\+" | v7 Search vendor "Tp-link" for product "Tl-r478\+" and version "v7" | - |
Affected
| ||||||
| Tp-link Search vendor "Tp-link" | Tl-r478g\+ Search vendor "Tp-link" for product "Tl-r478g\+" | v3 Search vendor "Tp-link" for product "Tl-r478g\+" and version "v3" | - |
Affected
| ||||||
| Tp-link Search vendor "Tp-link" | Tl-r483 Search vendor "Tp-link" for product "Tl-r483" | v5 Search vendor "Tp-link" for product "Tl-r483" and version "v5" | - |
Affected
| ||||||
| Tp-link Search vendor "Tp-link" | Tl-r483g Search vendor "Tp-link" for product "Tl-r483g" | v2 Search vendor "Tp-link" for product "Tl-r483g" and version "v2" | - |
Affected
| ||||||
| Tp-link Search vendor "Tp-link" | Tl-r488 Search vendor "Tp-link" for product "Tl-r488" | v5 Search vendor "Tp-link" for product "Tl-r488" and version "v5" | - |
Affected
| ||||||
| Tp-link Search vendor "Tp-link" | Tl-wvr300 Search vendor "Tp-link" for product "Tl-wvr300" | v4 Search vendor "Tp-link" for product "Tl-wvr300" and version "v4" | - |
Affected
| ||||||
| Tp-link Search vendor "Tp-link" | Tl-wvr302 Search vendor "Tp-link" for product "Tl-wvr302" | v2 Search vendor "Tp-link" for product "Tl-wvr302" and version "v2" | - |
Affected
| ||||||
| Tp-link Search vendor "Tp-link" | Tl-wvr450g Search vendor "Tp-link" for product "Tl-wvr450g" | v5 Search vendor "Tp-link" for product "Tl-wvr450g" and version "v5" | - |
Affected
| ||||||
| Tp-link Search vendor "Tp-link" | Tl-wvr900g Search vendor "Tp-link" for product "Tl-wvr900g" | v3 Search vendor "Tp-link" for product "Tl-wvr900g" and version "v3" | - |
Affected
| ||||||