CVE-2017-15627: Command Injection
Published Jan 11, 2018
·Updated
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-pns variable in the pptpclient.lua file.
Affected Software
76 affected components
TP-Link Er5110g Firmware
TP-Link Er5110g
TP-Link Er5120g Firmware
TP-Link Er5120g
TP-Link Er5510g Firmware
TP-Link Er5510g
TP-Link Er5520g Firmware
TP-Link Er5520g
TP-Link R4149g Firmware
TP-Link R4149g
TP-Link R4239g Firmware
TP-Link R4239g
TP-Link R4299g Firmware
TP-Link R4299g
TP-Link R473gp-ac Firmware
TP-Link R473gp-ac
TP-Link R473g Firmware
TP-Link R473g
TP-Link R473p-ac Firmware
TP-Link R473p-ac
TP-Link R473 Firmware
TP-Link R473
TP-Link R478g\+ Firmware
TP-Link R478g\+
TP-Link R478 Firmware
TP-Link R478
TP-Link R478\+ Firmware
TP-Link R478\+
TP-Link R483g Firmware
TP-Link R483g
TP-Link R483 Firmware
TP-Link R483
TP-Link R488 Firmware
TP-Link R488
TP-Link War1300l Firmware
TP-Link War1300l
TP-Link War1750l Firmware
TP-Link War1750l
TP-Link War2600l Firmware
TP-Link War2600l
TP-Link War302 Firmware
TP-Link War302
TP-Link War450l Firmware
TP-Link War450l
TP-Link War450 Firmware
TP-Link War450
TP-Link War458l Firmware
TP-Link War458l
TP-Link War458 Firmware
TP-Link War458
TP-Link War900l Firmware
TP-Link War900l
TP-Link Wvr1300g Firmware
TP-Link Wvr1300g
TP-Link Wvr1300l Firmware
TP-Link Wvr1300l
TP-Link Wvr1750l Firmware
TP-Link Wvr1750l
TP-Link Wvr2600l Firmware
TP-Link Wvr2600l
TP-Link Wvr300 Firmware
TP-Link Wvr300
TP-Link Wvr302 Firmware
TP-Link Wvr302
TP-Link Wvr4300l Firmware
TP-Link Wvr4300l
TP-Link Wvr450l Firmware=1.0161125
TP-Link Wvr450l
TP-Link Wvr450 Firmware
TP-Link Wvr450
TP-Link Wvr458l Firmware
TP-Link Wvr458l
TP-Link Wvr900g Firmware=3.0_170306
TP-Link Wvr900g
TP-Link Wvr900l Firmware
TP-Link Wvr900l
Event History
Jan 11, 2018
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-15627?
CVE-2017-15627 has a high severity rating due to its potential to allow remote command execution.
2
How do I fix CVE-2017-15627?
To fix CVE-2017-15627, update the affected TP-Link devices to the latest firmware version that addresses this vulnerability.
3
Which TP-Link devices are affected by CVE-2017-15627?
CVE-2017-15627 affects various TP-Link WVR, WAR, and ER series devices, most notably the WVR450l Firmware version 1.0161125.
4
Can CVE-2017-15627 be exploited remotely?
Yes, CVE-2017-15627 can be exploited remotely by authenticated administrators through command injection.
5
What type of vulnerability is CVE-2017-15627?
CVE-2017-15627 is classified as a command injection vulnerability.