Vulnerability Details CVE-2017-16960
TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/interface command to cgi-bin/luci, related to the get_device_byif function in /usr/lib/lua/luci/controller/admin/interface.lua in uhttpd.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 74.2%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 9.0
Products affected by CVE-2017-16960
-
cpe:2.3:h:tp-link:tl-er3210g:-
-
cpe:2.3:h:tp-link:tl-er3220g:-
-
cpe:2.3:h:tp-link:tl-er5110g:-
-
cpe:2.3:h:tp-link:tl-er5120g:-
-
cpe:2.3:h:tp-link:tl-er5510g:v2
-
cpe:2.3:h:tp-link:tl-er5510g:v3
-
cpe:2.3:h:tp-link:tl-er5520g:v2
-
cpe:2.3:h:tp-link:tl-er5520g:v3
-
cpe:2.3:h:tp-link:tl-er6110g:-
-
cpe:2.3:h:tp-link:tl-er6120g:v2
-
cpe:2.3:h:tp-link:tl-er6220g:-
-
cpe:2.3:h:tp-link:tl-er6510g:-
-
cpe:2.3:h:tp-link:tl-er6520g:v2
-
cpe:2.3:h:tp-link:tl-er6520g:v3
-
cpe:2.3:h:tp-link:tl-er7520g:-
-
cpe:2.3:h:tp-link:tl-r4149g:-
-
cpe:2.3:h:tp-link:tl-r4239g:v2
-
cpe:2.3:h:tp-link:tl-r4299g:v2
-
cpe:2.3:h:tp-link:tl-r473:v5
-
cpe:2.3:h:tp-link:tl-r473g:-
-
cpe:2.3:h:tp-link:tl-r473gp-ac:-
-
cpe:2.3:h:tp-link:tl-r473p-ac:-
-
cpe:2.3:h:tp-link:tl-r478+:v7
-
cpe:2.3:h:tp-link:tl-r478:v6
-
cpe:2.3:h:tp-link:tl-r478g+:v3
-
cpe:2.3:h:tp-link:tl-r478g:-
-
cpe:2.3:h:tp-link:tl-r479gp-ac:-
-
cpe:2.3:h:tp-link:tl-r479gpe-ac:-
-
cpe:2.3:h:tp-link:tl-r479p-ac:-
-
cpe:2.3:h:tp-link:tl-r483:v5
-
cpe:2.3:h:tp-link:tl-r483g:v2
-
cpe:2.3:h:tp-link:tl-r488:v5
-
cpe:2.3:h:tp-link:tl-war1200l:-
-
cpe:2.3:h:tp-link:tl-war1300l:-
-
cpe:2.3:h:tp-link:tl-war1750l:-
-
cpe:2.3:h:tp-link:tl-war2600l:-
-
cpe:2.3:h:tp-link:tl-war302:-
-
cpe:2.3:h:tp-link:tl-war450:-
-
cpe:2.3:h:tp-link:tl-war450l:-
-
cpe:2.3:h:tp-link:tl-war458:-
-
cpe:2.3:h:tp-link:tl-war458l:-
-
cpe:2.3:h:tp-link:tl-war900l:-
-
cpe:2.3:h:tp-link:tl-wvr1200l:-
-
cpe:2.3:h:tp-link:tl-wvr1300g:-
-
cpe:2.3:h:tp-link:tl-wvr1300l:-
-
cpe:2.3:h:tp-link:tl-wvr1750l:-
-
cpe:2.3:h:tp-link:tl-wvr2600l:-
-
cpe:2.3:h:tp-link:tl-wvr300:v4
-
cpe:2.3:h:tp-link:tl-wvr302:v2
-
cpe:2.3:h:tp-link:tl-wvr4300l:-
-
cpe:2.3:h:tp-link:tl-wvr450:-
-
cpe:2.3:h:tp-link:tl-wvr450g:v5
-
cpe:2.3:h:tp-link:tl-wvr450l:-
-
cpe:2.3:h:tp-link:tl-wvr458:-
-
cpe:2.3:h:tp-link:tl-wvr458l:-
-
cpe:2.3:h:tp-link:tl-wvr458p:-
-
cpe:2.3:h:tp-link:tl-wvr900g:v3
-
cpe:2.3:h:tp-link:tl-wvr900l:-
-
cpe:2.3:o:tp-link:tl-er3210g_firmware:-
-
cpe:2.3:o:tp-link:tl-er3220g_firmware:-
-
cpe:2.3:o:tp-link:tl-er5110g_firmware:-
-
cpe:2.3:o:tp-link:tl-er5120g_firmware:-
-
cpe:2.3:o:tp-link:tl-er6110g_firmware:-
-
cpe:2.3:o:tp-link:tl-er6220g_firmware:-
-
cpe:2.3:o:tp-link:tl-er6510g_firmware:-
-
cpe:2.3:o:tp-link:tl-er7520g_firmware:-
-
cpe:2.3:o:tp-link:tl-r4149g_firmware:-
-
cpe:2.3:o:tp-link:tl-r473g_firmware:-
-
cpe:2.3:o:tp-link:tl-r473gp-ac_firmware:-
-
cpe:2.3:o:tp-link:tl-r473p-ac_firmware:-
-
cpe:2.3:o:tp-link:tl-r478g_firmware:-
-
cpe:2.3:o:tp-link:tl-r479gp-ac_firmware:-
-
cpe:2.3:o:tp-link:tl-r479gpe-ac_firmware:-
-
cpe:2.3:o:tp-link:tl-r479p-ac_firmware:-
-
cpe:2.3:o:tp-link:tl-war1200l_firmware:-
-
cpe:2.3:o:tp-link:tl-war1300l_firmware:-
-
cpe:2.3:o:tp-link:tl-war1750l_firmware:-
-
cpe:2.3:o:tp-link:tl-war2600l_firmware:-
-
cpe:2.3:o:tp-link:tl-war302_firmware:-
-
cpe:2.3:o:tp-link:tl-war450_firmware:-
-
cpe:2.3:o:tp-link:tl-war450l_firmware:-
-
cpe:2.3:o:tp-link:tl-war458_firmware:-
-
cpe:2.3:o:tp-link:tl-war458l_firmware:-
-
cpe:2.3:o:tp-link:tl-war900l_firmware:-
-
cpe:2.3:o:tp-link:tl-wvr1200l_firmware:-
-
cpe:2.3:o:tp-link:tl-wvr1300g_firmware:-
-
cpe:2.3:o:tp-link:tl-wvr1300l_firmware:-
-
cpe:2.3:o:tp-link:tl-wvr1750l_firmware:-
-
cpe:2.3:o:tp-link:tl-wvr2600l_firmware:-
-
cpe:2.3:o:tp-link:tl-wvr4300l_firmware:-
-
cpe:2.3:o:tp-link:tl-wvr450_firmware:-
-
cpe:2.3:o:tp-link:tl-wvr450l_firmware:-
-
cpe:2.3:o:tp-link:tl-wvr458_firmware:-
-
cpe:2.3:o:tp-link:tl-wvr458l_firmware:-
-
cpe:2.3:o:tp-link:tl-wvr458p_firmware:-
-
cpe:2.3:o:tp-link:tl-wvr900l_firmware:-