cve-2017-16960
Vulnerability from cvelistv5
Published
2017-11-27 10:00
Modified
2024-08-05 20:43
Severity ?
EPSS score ?
Summary
TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/interface command to cgi-bin/luci, related to the get_device_byif function in /usr/lib/lua/luci/controller/admin/interface.lua in uhttpd.
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T20:43:59.342Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/coincoin7/Wireless-Router-Vulnerability/blob/master/TplinkInterfaceAuthenticatedRCE.txt"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2017-11-27T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/interface command to cgi-bin/luci, related to the get_device_byif function in /usr/lib/lua/luci/controller/admin/interface.lua in uhttpd."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-11-27T09:57:01",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/coincoin7/Wireless-Router-Vulnerability/blob/master/TplinkInterfaceAuthenticatedRCE.txt"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2017-16960",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/interface command to cgi-bin/luci, related to the get_device_byif function in /usr/lib/lua/luci/controller/admin/interface.lua in uhttpd."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://github.com/coincoin7/Wireless-Router-Vulnerability/blob/master/TplinkInterfaceAuthenticatedRCE.txt",
"refsource": "MISC",
"url": "https://github.com/coincoin7/Wireless-Router-Vulnerability/blob/master/TplinkInterfaceAuthenticatedRCE.txt"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2017-16960",
"datePublished": "2017-11-27T10:00:00",
"dateReserved": "2017-11-27T00:00:00",
"dateUpdated": "2024-08-05T20:43:59.342Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2017-16960\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2017-11-27T10:29:00.547\",\"lastModified\":\"2024-11-21T03:17:19.890\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/interface command to cgi-bin/luci, related to the get_device_byif function in /usr/lib/lua/luci/controller/admin/interface.lua in uhttpd.\"},{\"lang\":\"es\",\"value\":\"Los dispositivos TP-Link TL-WVR, TL-WAR, TL-ER y TL-R permiten que usuarios autenticados remotos ejecuten comandos arbitrarios mediante metacaracteres shell en el campo t_bindif de un comando admin/interface en cgi-bin/luci. Esto se relaciona con la funci\u00f3n get_device_byif en /usr/lib/lua/luci/controller/admin/interface.lua en uhttpd.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:S/C:C/I:C/A:C\",\"baseScore\":9.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"SINGLE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":8.0,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-78\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:tp-link:tl-er5510g:v2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D24328C0-9611-4789-93B5-B60268A58238\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:tp-link:tl-er5510g:v3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E9D6B49A-76DE-4F4D-8769-6B57F0F07FCB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:tp-link:tl-er5520g:v2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F462B7E8-30CA-43B7-B0AD-6BFF31390FB4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:tp-link:tl-er5520g:v3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C8CDB038-0534-472F-8900-1209E460B3AE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:tp-link:tl-er6120g:v2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"78E2DC44-0319-4268-8912-25AD0F9FE867\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:tp-link:tl-er6520g:v2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E523045C-0C72-4C15-A777-CD80D01C9C57\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:tp-link:tl-er6520g:v3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"024E082F-16C4-4393-9B7D-60B2C0BC8FDC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:tp-link:tl-r4239g:v2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1DEC78BE-3E4A-40D8-8064-A5B05AE50341\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:tp-link:tl-r4299g:v2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"53D70E3D-9214-4446-AFE1-31F6B9AE5F51\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:tp-link:tl-r473:v5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D7DA7575-DE2E-4025-8FD5-403EE32C516F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:tp-link:tl-r478:v6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D854EDA-5393-43CA-B088-6132EE0550F9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:tp-link:tl-r478\\\\+:v7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E85E0A1B-A7AF-4E29-A7CE-B48B4D41EC11\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:tp-link:tl-r478g\\\\+:v3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8F5A5A9E-8D88-4AFE-8EB9-F7196C934923\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:tp-link:tl-r483:v5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"65C14007-6D98-4F55-9D7B-6B14E951DA75\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:tp-link:tl-r483g:v2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"986C07E3-9DE4-485B-BC5E-67F266C6E5FF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:tp-link:tl-r488:v5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8EEFEFB8-AED4-4C83-86D3-CE9502C5B36A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:tp-link:tl-wvr300:v4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A96652E8-10EA-4B5E-BD64-1853672696B5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:tp-link:tl-wvr302:v2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FBE70EF0-508C-4F34-829C-0B30FAA96E89\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:tp-link:tl-wvr450g:v5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"473671D0-D0C9-4D36-AE5E-E63A5EBA0C5A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:tp-link:tl-wvr900g:v3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8344CA75-15D5-4106-80DF-4772C1C0D3B6\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-wvr450_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F740E87-DEB3-4DD7-90A0-08FF079F7242\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-wvr450:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FEA306AC-0231-4359-8794-BFA81D085410\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-wvr450l_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB72835B-95E0-4C65-997C-6FE3656F5584\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-wvr450l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7BFD8A41-3C39-4DB4-B908-ED65AB27BDB7\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-wvr458_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"982AFFBC-52BC-4921-87BB-8F0F1C31558C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-wvr458:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B867C51B-FD51-40E1-BFFC-A9DA8A3606B0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-wvr458l_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D1583550-1D76-45E8-89A9-CD1D843BB93E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-wvr458l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"93F85C46-24B2-498E-AB6F-6329EF0F3B84\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-wvr458p_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F6F3557E-AA91-4123-847A-79BB67A6571D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-wvr458p:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F47FC91-5861-465F-BF05-8C666B818722\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-wvr900l_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F26DA2D7-B242-49D7-A54D-E8F4E8D9E1CD\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-wvr900l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B9C4F2B2-F886-43ED-A29D-20865AA31B55\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-wvr1200l_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"403F67A7-7E54-4255-9838-CDD6B9AA8266\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-wvr1200l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ECE9545C-EC9B-47B0-BEA9-3B2D5109F970\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-wvr1300l_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E4BFFF84-D7E5-475B-99E6-C93E3844CA4F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-wvr1300l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1FBBB236-C33A-4FD7-888F-0BA9EB162B9C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-wvr1300g_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B19D9121-35E3-479C-BE19-7E67DA2332C2\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-wvr1300g:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7D45A711-B6FD-48A4-B455-286F80DE221B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-wvr1750l_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C5A6D7B7-781F-4F3C-B9B8-0C02BD7894F0\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-wvr1750l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E7087925-7984-44DD-A20A-8B3C87802E3A\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-wvr2600l_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6FB1C13D-F1B7-40E4-8C70-3DBFBF17671B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-wvr2600l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2896BBB8-BA92-4B36-9BB7-E9397CDBB545\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-wvr4300l_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"14C817C4-0B32-402D-909A-1DC9CA39DA1F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-wvr4300l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A3E532F4-3E42-4C9F-A01A-E7EFB7B48804\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-war302_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1CE1FA23-A3C7-4F9D-B466-624448BDC9B0\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-war302:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E9FD7E97-3478-4F42-BB4A-5A1E1DD53877\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-war450_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C9DAF676-8D9B-4689-A6AD-189E44161410\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-war450:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A167020D-FEB5-42E0-8815-B7F2501D6C65\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-war450l_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FEF8DEA2-F7D4-4ADC-B1F6-78A21CC75181\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-war450l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EF4F2966-FD95-4B94-A7FB-8021782AD170\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-war458_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C7355D93-F480-4E24-A0CD-CAC3AADE454F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-war458:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4D950C88-8CAA-430A-A5BB-B65E4FF13074\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-war458l_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DC78CAB2-0C24-4FF8-B758-AADDB3F24989\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-war458l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5BBD997E-88FC-4D23-B762-331A63A29C83\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-war900l_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5A4D9E7B-E147-4F80-8CD9-D49B023EEBC0\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-war900l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"84AB3B41-D8B1-4A0C-A5DD-5254D96D0655\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-war1200l_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"02A26160-2484-4517-B223-40A329DAEDFA\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-war1200l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"72F6A8BD-0012-48FA-B5D0-A6F03097FEA7\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-war1300l_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F7B0BCD4-BE7E-4E30-8D41-5BB30EDD1F21\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-war1300l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D6AE4D9-A750-4770-A07A-FC87DCA4E840\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-war1750l_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"87876AD9-B258-4E8E-ABF6-6704F6EEE468\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-war1750l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E888A70B-984E-4D7C-B324-2F0E9C8E57C6\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-war2600l_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D5CD25BA-4D2F-46FE-B73B-DBFEC70F16CB\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-war2600l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1E4EF035-D38D-478C-BCAA-EE96EBEC9D80\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-er3210g_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FECE364D-6F3C-4378-9D26-03C551F8CF54\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-er3210g:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B525A04A-6596-482F-82B6-46B61B9D6F84\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-er3220g_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F6FA6F6-2417-47D9-A4B8-E764C052A723\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-er3220g:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"53E23FA7-5DB6-4F61-B925-C027769DDAB6\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-er5110g_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9CE6F205-6017-4855-9D3A-CCCAAF4CD326\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-er5110g:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B4F14A9A-4134-4569-ACB9-DFB23D7DBB86\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-er5120g_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4DD2CC06-2AC5-4D79-8DAB-B4D4DDEB659C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-er5120g:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AFB0E248-0844-4F67-B014-0D91097D2892\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-er6110g_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"504894B1-8B2B-40D3-B242-2451649FCEFA\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-er6110g:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2EDF4CBE-1393-4FA3-BEC5-D70DA65FEDAF\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-er6220g_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6C871734-EAEC-4E7B-A846-1BF63E6D5061\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-er6220g:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"91196457-19D1-4A9D-93CF-31A90CA72B18\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-er6510g_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FEF6DB66-3477-4BF6-A61D-6208B33CA00A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-er6510g:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"531FB326-A000-4E69-86FC-8BC6C3B93401\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-er7520g_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D2885417-FA1E-46DA-A674-7ACAECD38DF3\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-er7520g:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FE3D607F-B64A-4E11-AA80-15CF41818FB6\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-r473g_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6D1B1DAE-DEFF-4D88-AE89-81C7B9EEA262\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-r473g:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9FAADD27-C0F7-42E0-AA3F-EA1B0E711D30\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-r473p-ac_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2A207AE5-DE94-4EBF-B755-B2341FA569B3\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-r473p-ac:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"40C69293-1D3F-4965-A464-1820D5DC16C1\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-r473gp-ac_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D5E70455-DFCC-49C1-9754-0422DB8AB12C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-r473gp-ac:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DCB4A127-4E83-47B5-B101-3AB12D7484B0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-r478g_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2D0AA0C7-21F6-4059-A622-3274F3C666D8\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-r478g:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3EC48B20-C2B6-445D-9563-488BA4F7A8F9\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-r478g_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2D0AA0C7-21F6-4059-A622-3274F3C666D8\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-r478g:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3EC48B20-C2B6-445D-9563-488BA4F7A8F9\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-r479p-ac_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"15E568C0-E4DF-4FDD-B8DB-327247EAAE14\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-r479p-ac:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DE38ED07-6E35-4836-95B3-9B20D6D6A6ED\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-r479gp-ac_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8F175E34-8561-40EB-A299-A38F03F5B6CC\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-r479gp-ac:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D8D3D6F5-F551-41A3-8756-CD276D935C5A\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-r479gpe-ac_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"026AD2C7-73E8-44AD-A9EE-F21386F88246\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-r479gpe-ac:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9891A83F-56E5-421B-A0DC-65B5B0A82979\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:tp-link:tl-r4149g_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1235A816-60EC-4979-838B-C3E825475758\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:tp-link:tl-r4149g:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3E999611-39E1-48C1-99CB-581FF0451FD2\"}]}]}],\"references\":[{\"url\":\"https://github.com/coincoin7/Wireless-Router-Vulnerability/blob/master/TplinkInterfaceAuthenticatedRCE.txt\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/coincoin7/Wireless-Router-Vulnerability/blob/master/TplinkInterfaceAuthenticatedRCE.txt\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]}]}}"
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.