CVE-2017-15618: Command Injection
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-enable variable in the pptpclient.lua file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-15618?
CVE-2017-15618 has a medium severity rating due to the potential for remote command execution by authenticated users.
How do I fix CVE-2017-15618?
To remediate CVE-2017-15618, update your affected TP-Link device firmware to the latest version that addresses this vulnerability.
Which devices are affected by CVE-2017-15618?
Devices affected by CVE-2017-15618 include specific TP-Link WVR, WAR, and ER series models, particularly those with vulnerable firmware.
Can CVE-2017-15618 be exploited remotely?
Yes, CVE-2017-15618 can be exploited remotely by authenticated administrators through command injection.
What type of vulnerability is CVE-2017-15618?
CVE-2017-15618 is categorized as a command injection vulnerability that allows unauthorized execution of arbitrary commands.