CVE-2017-15631: Command Injection
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-workmode variable in the pptpclient.lua file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-15631?
CVE-2017-15631 is rated as a high severity vulnerability due to its potential to allow remote command execution.
How do I fix CVE-2017-15631?
To fix CVE-2017-15631, update the affected TP-Link device firmware to a version that addresses this vulnerability.
Which devices are affected by CVE-2017-15631?
CVE-2017-15631 affects various TP-Link WVR, WAR, and ER devices, particularly those running specific versions of their firmware.
Can CVE-2017-15631 be exploited remotely?
Yes, CVE-2017-15631 can be exploited remotely by authenticated administrators through command injection.
What type of attack does CVE-2017-15631 involve?
CVE-2017-15631 involves a command injection vulnerability that allows execution of arbitrary commands in the affected devices.