TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the name variable in the wportal.lua file.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Er5110g_firmware | Tp-link | - (including) | - (including) |
References
- http://www.securityfocus.com/archive/1/541655/100/0/threaded
- https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt
- http://www.securityfocus.com/archive/1/541655/100/0/threaded
- https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt