CVE-2017-15630: Command Injection
Published Jan 11, 2018
·Updated
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-remotesubnet variable in the pptpclient.lua file.
Affected Software
76 affected components
TP-Link Er5110g Firmware
TP-Link Er5110g
TP-Link Er5120g Firmware
TP-Link Er5120g
TP-Link Er5510g Firmware
TP-Link Er5510g
TP-Link Er5520g Firmware
TP-Link Er5520g
TP-Link R4149g Firmware
TP-Link R4149g
TP-Link R4239g Firmware
TP-Link R4239g
TP-Link R4299g Firmware
TP-Link R4299g
TP-Link R473gp-ac Firmware
TP-Link R473gp-ac
TP-Link R473g Firmware
TP-Link R473g
TP-Link R473p-ac Firmware
TP-Link R473p-ac
TP-Link R473 Firmware
TP-Link R473
TP-Link R478g\+ Firmware
TP-Link R478g\+
TP-Link R478 Firmware
TP-Link R478
TP-Link R478\+ Firmware
TP-Link R478\+
TP-Link R483g Firmware
TP-Link R483g
TP-Link R483 Firmware
TP-Link R483
TP-Link R488 Firmware
TP-Link R488
TP-Link War1300l Firmware
TP-Link War1300l
TP-Link War1750l Firmware
TP-Link War1750l
TP-Link War2600l Firmware
TP-Link War2600l
TP-Link War302 Firmware
TP-Link War302
TP-Link War450l Firmware
TP-Link War450l
TP-Link War450 Firmware
TP-Link War450
TP-Link War458l Firmware
TP-Link War458l
TP-Link War458 Firmware
TP-Link War458
TP-Link War900l Firmware
TP-Link War900l
TP-Link Wvr1300g Firmware
TP-Link Wvr1300g
TP-Link Wvr1300l Firmware
TP-Link Wvr1300l
TP-Link Wvr1750l Firmware
TP-Link Wvr1750l
TP-Link Wvr2600l Firmware
TP-Link Wvr2600l
TP-Link Wvr300 Firmware
TP-Link Wvr300
TP-Link Wvr302 Firmware
TP-Link Wvr302
TP-Link Wvr4300l Firmware
TP-Link Wvr4300l
TP-Link Wvr450l Firmware=1.0161125
TP-Link Wvr450l
TP-Link Wvr450 Firmware
TP-Link Wvr450
TP-Link Wvr458l Firmware
TP-Link Wvr458l
TP-Link Wvr900g Firmware=3.0_170306
TP-Link Wvr900g
TP-Link Wvr900l Firmware
TP-Link Wvr900l
Event History
Jan 11, 2018
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-15630?
CVE-2017-15630 is considered critical due to its potential for remote command execution by authenticated users.
2
How do I fix CVE-2017-15630?
To fix CVE-2017-15630, update the affected TP-Link devices to the latest firmware version provided by TP-Link.
3
Which devices are affected by CVE-2017-15630?
CVE-2017-15630 affects various TP-Link WVR, WAR, and ER model devices with outdated firmware.
4
What is the nature of the vulnerability in CVE-2017-15630?
CVE-2017-15630 is a command injection vulnerability allowing remote authenticated administrators to execute arbitrary commands.
5
Who can exploit CVE-2017-15630?
CVE-2017-15630 can be exploited by remote authenticated administrators who have access to the vulnerable TP-Link devices.