CVE-2017-17757

Опубликовано: 19 дек. 2017

Источник: nvd

CVSS3: 8.8

CVSS2: 9

EPSS Низкий

Описание

TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the interface field of an admin/wportal command to cgi-bin/luci, related to the get_device_byif function in /usr/lib/lua/luci/controller/admin/wportal.lua in uhttpd.

Ссылки

https://github.com/L1ZhaoXin/Router-Vulnerability-Research/blob/master/Tplink_LUCI_Wechat_Authenticated_RCE_Record.txt
Exploit
Issue Tracking
Third Party Advisory
https://github.com/L1ZhaoXin/Router-Vulnerability-Research/blob/master/Tplink_LUCI_Wechat_Authenticated_RCE_Record.txt
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:tp-link:tl-wvr450l_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wvr450l:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:tp-link:tl-wvr458l_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wvr458l:-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

cpe:2.3:o:tp-link:tl-wvr900l_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wvr900l:-:*:*:*:*:*:*:*

Конфигурация 4

Одновременно

cpe:2.3:o:tp-link:tl-wvr1200l_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wvr1200l:-:*:*:*:*:*:*:*

Конфигурация 5

Одновременно

cpe:2.3:o:tp-link:tl-wvr1300l_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wvr1300l:-:*:*:*:*:*:*:*

Конфигурация 6

Одновременно

cpe:2.3:o:tp-link:tl-wvr1750l_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wvr1750l:-:*:*:*:*:*:*:*

Конфигурация 7

Одновременно

cpe:2.3:o:tp-link:tl-wvr2600l_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wvr2600l:-:*:*:*:*:*:*:*

Конфигурация 8

Одновременно

cpe:2.3:o:tp-link:tl-wvr4300l_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-wvr4300l:-:*:*:*:*:*:*:*

Конфигурация 9

Одновременно

cpe:2.3:o:tp-link:tl-war450l_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-war450l:-:*:*:*:*:*:*:*

Конфигурация 10

Одновременно

cpe:2.3:o:tp-link:tl-war458l_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-war458l:-:*:*:*:*:*:*:*

Конфигурация 11

Одновременно

cpe:2.3:o:tp-link:tl-war900l_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-war900l:-:*:*:*:*:*:*:*

Конфигурация 12

Одновременно

cpe:2.3:o:tp-link:tl-war1200l_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-war1200l:-:*:*:*:*:*:*:*

Конфигурация 13

Одновременно

cpe:2.3:o:tp-link:tl-war1300l_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-war1300l:-:*:*:*:*:*:*:*

Конфигурация 14

Одновременно

cpe:2.3:o:tp-link:tl-war1750l_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-war1750l:-:*:*:*:*:*:*:*

Конфигурация 15

Одновременно

cpe:2.3:o:tp-link:tl-war2600l_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:tp-link:tl-war2600l:-:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01277

Низкий

8.8 High

CVSS3

9 Critical

CVSS2

Дефекты

CWE-78

Связанные уязвимости

GHSA-2j5q-8vp4-fjw9

CVSS3: 8.8

github

больше 3 лет назад

EPSS

Процентиль: 79%

0.01277

Низкий

8.8 High

CVSS3

9 Critical

CVSS2

Дефекты

CWE-78