CVE-2017-15629

TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-tunnelname variable in…

published January 11, 2018

CVSS
—
EPSS
4%
Percentile
91.2
In the wild
Unconfirmed
What it is

TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-tunnelname variable in the pptp_client.lua file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04367 · 91.2th percentile
Published
2018-01-11T16:00Z
EPSS history
Timeline
  • 11 JAN 16:00Z
    TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-tunnelname variable in…
    cvelistv5