CVE-2017-15613

TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-interface variable in the cmxddns.lua file.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:tp-link:er5110g_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:er5110g:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:tp-link:er5120g_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:er5120g:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:tp-link:er5510g_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:er5510g:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:tp-link:er5520g_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:er5520g:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:tp-link:r4149g_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:r4149g:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:tp-link:r4239g_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:r4239g:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:tp-link:r4299g_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:r4299g:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:tp-link:r473gp-ac_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:r473gp-ac:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:tp-link:r473g_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:r473g:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:tp-link:r473p-ac_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:r473p-ac:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:tp-link:r473_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:r473:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:tp-link:r478g\+_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:r478g\+:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:tp-link:r478_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:r478:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:tp-link:r478\+_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:r478\+:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:tp-link:r483g_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:r483g:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:tp-link:r483_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:r483:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:tp-link:r488_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:r488:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:tp-link:war1300l_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:war1300l:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:tp-link:war1750l_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:war1750l:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:tp-link:war2600l_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:war2600l:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:tp-link:war302_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:war302:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:tp-link:war450l_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:war450l:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:tp-link:war450_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:war450:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:tp-link:war458l_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:war458l:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:tp-link:war458_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:war458:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:tp-link:war900l_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:war900l:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:tp-link:wvr1300g_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:wvr1300g:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND
cpe:2.3:o:tp-link:wvr1300l_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:wvr1300l:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND
cpe:2.3:o:tp-link:wvr1750l_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:wvr1750l:-:*:*:*:*:*:*:*

Configuration 30 (hide)

AND
cpe:2.3:o:tp-link:wvr2600l_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:wvr2600l:-:*:*:*:*:*:*:*

Configuration 31 (hide)

AND
cpe:2.3:o:tp-link:wvr300_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:wvr300:-:*:*:*:*:*:*:*

Configuration 32 (hide)

AND
cpe:2.3:o:tp-link:wvr302_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:wvr302:-:*:*:*:*:*:*:*

Configuration 33 (hide)

AND
cpe:2.3:o:tp-link:wvr4300l_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:wvr4300l:-:*:*:*:*:*:*:*

Configuration 34 (hide)

AND
cpe:2.3:o:tp-link:wvr450l_firmware:1.0161125:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:wvr450l:-:*:*:*:*:*:*:*

Configuration 35 (hide)

AND
cpe:2.3:o:tp-link:wvr450_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:wvr450:-:*:*:*:*:*:*:*

Configuration 36 (hide)

AND
cpe:2.3:o:tp-link:wvr458l_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:wvr458l:-:*:*:*:*:*:*:*

Configuration 37 (hide)

AND
cpe:2.3:o:tp-link:wvr900g_firmware:3.0_170306:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:wvr900g:-:*:*:*:*:*:*:*

Configuration 38 (hide)

AND
cpe:2.3:o:tp-link:wvr900l_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:tp-link:wvr900l:-:*:*:*:*:*:*:*

History

21 Nov 2024, 03:14

Type Values Removed Values Added
References () http://www.securityfocus.com/archive/1/541655/100/0/threaded - Exploit, Third Party Advisory, VDB Entry () http://www.securityfocus.com/archive/1/541655/100/0/threaded - Exploit, Third Party Advisory, VDB Entry
References () https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt - Exploit, Third Party Advisory () https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt - Exploit, Third Party Advisory

Information

Published : 2018-01-11 16:29

Updated : 2024-11-21 03:14


NVD link : CVE-2017-15613

Mitre link : CVE-2017-15613

CVE.ORG link : CVE-2017-15613


JSON object : View

Products Affected

tp-link

  • war1300l_firmware
  • wvr458l
  • r478g\+
  • war900l_firmware
  • r4239g
  • r488
  • war302
  • wvr302_firmware
  • r478g\+_firmware
  • wvr450l
  • wvr900g
  • war450l
  • er5120g_firmware
  • wvr450_firmware
  • r478\+_firmware
  • r478_firmware
  • r488_firmware
  • war900l
  • wvr1300g
  • r478
  • wvr300_firmware
  • r483g
  • wvr2600l_firmware
  • r478\+
  • wvr1300g_firmware
  • r473p-ac
  • er5110g_firmware
  • r483
  • war1750l_firmware
  • r473gp-ac_firmware
  • wvr1300l
  • er5510g
  • wvr1750l
  • wvr302
  • war302_firmware
  • r473_firmware
  • wvr300
  • er5520g_firmware
  • r4299g_firmware
  • r4239g_firmware
  • wvr900g_firmware
  • r473g_firmware
  • r473gp-ac
  • r473
  • r4149g_firmware
  • wvr2600l
  • er5520g
  • r483g_firmware
  • war458l_firmware
  • war458l
  • wvr1300l_firmware
  • war1300l
  • wvr4300l
  • war450_firmware
  • er5120g
  • wvr450l_firmware
  • wvr900l
  • er5110g
  • wvr450
  • wvr900l_firmware
  • wvr1750l_firmware
  • war458
  • wvr458l_firmware
  • war450
  • r4149g
  • war450l_firmware
  • wvr4300l_firmware
  • r4299g
  • r483_firmware
  • r473g
  • war2600l_firmware
  • r473p-ac_firmware
  • war1750l
  • er5510g_firmware
  • war2600l
  • war458_firmware