CVE-2017-15619: Command Injection
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the pptphellointerval variable in the pptpclient.lua file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-15619?
CVE-2017-15619 is considered a high severity vulnerability due to its potential for remote command execution.
How do I fix CVE-2017-15619?
To fix CVE-2017-15619, update affected TP-Link devices to the latest firmware version that mitigates this vulnerability.
What devices are affected by CVE-2017-15619?
CVE-2017-15619 affects multiple TP-Link devices including the WVR, WAR, and ER series, such as the ER5110G and WAR1300L.
Can CVE-2017-15619 be exploited by unauthenticated users?
No, CVE-2017-15619 requires an authenticated administrator to exploit the command injection vulnerability.
What is the nature of CVE-2017-15619?
CVE-2017-15619 is a command injection vulnerability that allows remote authenticated users to execute arbitrary commands through a specific variable.