CVE-2017-15634 Command injection in n/a
Remote authenticated administrators can execute arbitrary commands on TP-Link WVR, WAR, and ER devices via a command injection vulnerability.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-15634?
CVE-2017-15634 is a high-severity command injection vulnerability in n/a, published on 11 Jan 2018. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the name variable in the wportal.lua file.
Which versions are affected by CVE-2017-15634?
It affects 38 products.
Products include Tp-Link Er5110g Firmware, Tp-Link Er5120g Firmware, Tp-Link Er5510g Firmware, Tp-Link Er5520g Firmware, Tp-Link R4149g Firmware, Tp-Link R4239g Firmware and 32 more.
How do I fix CVE-2017-15634?
No fix has been published for CVE-2017-15634 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2017-15634 being exploited?
There is no known exploitation of CVE-2017-15634 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-h749-34wp-72hp.