CVE-2017-15623: Command Injection
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-enable variable in the pptpserver.lua file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-15623?
CVE-2017-15623 is considered a high severity vulnerability due to its potential for remote command execution.
How do I fix CVE-2017-15623?
To fix CVE-2017-15623, ensure that you update your TP-Link device firmware to the latest version provided by the manufacturer.
Which TP-Link devices are affected by CVE-2017-15623?
CVE-2017-15623 affects multiple TP-Link WVR, WAR, and ER series devices, particularly those with specific firmware versions.
Can CVE-2017-15623 be exploited without authentication?
No, CVE-2017-15623 requires the attacker to have remote authenticated administrative access to exploit the vulnerability.
What type of attack does CVE-2017-15623 enable?
CVE-2017-15623 allows an attacker to execute arbitrary commands on the affected TP-Link devices.