CVE-2017-17758: OS Command Injection
First published: Tue Dec 19 2017(Updated: )
TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the interface field of an admin/dhcps command to cgi-bin/luci, related to the zone_get_iface_bydev function in /usr/lib/lua/luci/controller/admin/dhcps.lua in uhttpd.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Tp-link Wvr450l Firmware | ||
| TP-Link WVR450L | ||
| TP-Link TL-WVR458L | ||
| TP-Link TL-WVR458L Firmware | ||
| TP-Link WVR900L Firmware | ||
| TP-Link WVR900L Firmware | ||
| TP-Link TL-WVR1200L | ||
| TP-Link TL-WVR1200L Firmware | ||
| TP-Link WVR1300L Firmware | ||
| TP-Link WVR1300L | ||
| TP-Link TL-WVR1750L Firmware | ||
| TP-Link WVR1750L | ||
| Tp-link Wvr2600l Firmware | ||
| TP-Link WVR2600L | ||
| TP-Link WVR4300L Firmware | ||
| TP-Link WVR4300L Firmware | ||
| TP-Link WR450L Firmware | ||
| TP-Link TL-WAR450L Firmware | ||
| TP-Link WAR458L Firmware | ||
| TP-Link WAR458L | ||
| TP-Link WDR900L Firmware | ||
| TP-Link WAR900L | ||
| TP-Link TL-WAR1200L Firmware | ||
| TP-Link TL-WAR1200L Firmware | ||
| TP-Link WAR1300L Firmware | ||
| TP-Link WAR1300L | ||
| TP-Link WAR1750L Firmware | ||
| TP-Link WAR1750L Firmware | ||
| Tp-link War2600l Firmware | ||
| TP-Link Archer WAR2600L |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2017-17758.
What is the severity of CVE-2017-17758?
The severity of CVE-2017-17758 is critical with a score of 8.8.
Which TP-Link devices are affected by CVE-2017-17758?
TP-Link TL-WVR and TL-WAR devices are affected.
How can remote authenticated users exploit CVE-2017-17758?
Remote authenticated users can exploit CVE-2017-17758 by executing arbitrary commands via shell metacharacters in the interface field of an admin/dhcps command to cgi-bin/luci.
Is there a fix available for CVE-2017-17758?
The fix for CVE-2017-17758 is not mentioned in the provided information.
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/description
- agent/event
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/tp-link
- canonical/tp-link wvr450l firmware
- canonical/tp-link wvr450l
- canonical/tp-link tl-wvr458l
- canonical/tp-link tl-wvr458l firmware
- canonical/tp-link wvr900l firmware
- canonical/tp-link tl-wvr1200l
- canonical/tp-link tl-wvr1200l firmware
- canonical/tp-link tl-wvr1300l firmware
- canonical/tp-link wvr1300l
- canonical/tp-link tl-wvr1750l firmware
- canonical/tp-link wvr1750l
- canonical/tp-link wvr2600l firmware
- canonical/tp-link wvr2600l
- canonical/tp-link wvr4300l firmware
- canonical/tp-link wr450l firmware
- canonical/tp-link tl-war450l firmware
- canonical/tp-link war458l firmware
- canonical/tp-link war458l
- canonical/tp-link wdr900l firmware
- canonical/tp-link war900l
- canonical/tp-link tl-war1200l firmware
- canonical/tp-link war1300l firmware
- canonical/tp-link war1300l
- canonical/tp-link war1750l firmware
- canonical/tp-link war2600l firmware
- canonical/tp-link archer war2600l