CVE-2017-16960
Summary
| CVE | CVE-2017-16960 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2017-11-27 10:29:00 UTC |
| Updated | 2025-04-20 01:37:25 UTC |
| Description | TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/interface command to cgi-bin/luci, related to the get_device_byif function in /usr/lib/lua/luci/controller/admin/interface.lua in uhttpd. |
Risk And Classification
Primary CVSS: v3.0 8.8 HIGH from [email protected]
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Problem Types: CWE-78 | n/a
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.0 | [email protected] | Primary | 8.8 | HIGH | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| 2.0 | [email protected] | Primary | 9 | AV:N/AC:L/Au:S/C:C/I:C/A:C |
CVSS v3.0 Breakdown
Attack Vector
NetworkAttack Complexity
LowPrivileges Required
LowUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
HighAvailability
HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
SingleConfidentiality
CompleteIntegrity
CompleteAvailability
CompleteAV:N/AC:L/Au:S/C:C/I:C/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Tp-link | Tl-er3210g | - | All | All | All |
| Operating System | Tp-link | Tl-er3210g Firmware | - | All | All | All |
| Hardware | Tp-link | Tl-er3220g | - | All | All | All |
| Operating System | Tp-link | Tl-er3220g Firmware | All | All | All | All |
| Hardware | Tp-link | Tl-er5110g | - | All | All | All |
| Operating System | Tp-link | Tl-er5110g Firmware | - | All | All | All |
| Hardware | Tp-link | Tl-er5120g | - | All | All | All |
| Operating System | Tp-link | Tl-er5120g Firmware | - | All | All | All |
| Hardware | Tp-link | Tl-er5510g | v2 | All | All | All |
| Hardware | Tp-link | Tl-er5510g | v3 | All | All | All |
| Hardware | Tp-link | Tl-er5520g | v2 | All | All | All |
| Hardware | Tp-link | Tl-er5520g | v3 | All | All | All |
| Hardware | Tp-link | Tl-er6110g | - | All | All | All |
| Operating System | Tp-link | Tl-er6110g Firmware | - | All | All | All |
| Hardware | Tp-link | Tl-er6120g | v2 | All | All | All |
| Hardware | Tp-link | Tl-er6220g | - | All | All | All |
| Operating System | Tp-link | Tl-er6220g Firmware | - | All | All | All |
| Hardware | Tp-link | Tl-er6510g | - | All | All | All |
| Operating System | Tp-link | Tl-er6510g Firmware | - | All | All | All |
| Hardware | Tp-link | Tl-er6520g | v2 | All | All | All |
| Hardware | Tp-link | Tl-er6520g | v3 | All | All | All |
| Hardware | Tp-link | Tl-er7520g | - | All | All | All |
| Operating System | Tp-link | Tl-er7520g Firmware | - | All | All | All |
| Hardware | Tp-link | Tl-r4239g | v2 | All | All | All |
| Hardware | Tp-link | Tl-r4299g | v2 | All | All | All |
| Hardware | Tp-link | Tl-r473 | v5 | All | All | All |
| Hardware | Tp-link | Tl-r473g | - | All | All | All |
| Hardware | Tp-link | Tl-r473gp-ac | - | All | All | All |
| Operating System | Tp-link | Tl-r473gp-ac Firmware | - | All | All | All |
| Operating System | Tp-link | Tl-r473g Firmware | - | All | All | All |
| Hardware | Tp-link | Tl-r473p-ac | - | All | All | All |
| Operating System | Tp-link | Tl-r473p-ac Firmware | - | All | All | All |
| Hardware | Tp-link | Tl-r478 | v6 | All | All | All |
| Hardware | Tp-link | Tl-r478g | - | All | All | All |
| Hardware | Tp-link | Tl-r478g | v3 | All | All | All |
| Operating System | Tp-link | Tl-r478g Firmware | - | All | All | All |
| Hardware | Tp-link | Tl-r478 | v7 | All | All | All |
| Hardware | Tp-link | Tl-r483 | v5 | All | All | All |
| Hardware | Tp-link | Tl-r483g | v2 | All | All | All |
| Hardware | Tp-link | Tl-r488 | v5 | All | All | All |
| Hardware | Tp-link | Tl-war1200l | - | All | All | All |
| Operating System | Tp-link | Tl-war1200l Firmware | - | All | All | All |
| Hardware | Tp-link | Tl-war1300l | - | All | All | All |
| Operating System | Tp-link | Tl-war1300l Firmware | - | All | All | All |
| Hardware | Tp-link | Tl-war1750l | - | All | All | All |
| Operating System | Tp-link | Tl-war1750l Firmware | - | All | All | All |
| Hardware | Tp-link | Tl-war2600l | - | All | All | All |
| Operating System | Tp-link | Tl-war2600l Firmware | - | All | All | All |
| Hardware | Tp-link | Tl-war302 | - | All | All | All |
| Operating System | Tp-link | Tl-war302 Firmware | - | All | All | All |
| Hardware | Tp-link | Tl-war450 | - | All | All | All |
| Hardware | Tp-link | Tl-war450l | - | All | All | All |
| Operating System | Tp-link | Tl-war450l Firmware | - | All | All | All |
| Operating System | Tp-link | Tl-war450 Firmware | - | All | All | All |
| Hardware | Tp-link | Tl-war458 | - | All | All | All |
| Hardware | Tp-link | Tl-war458l | - | All | All | All |
| Operating System | Tp-link | Tl-war458l Firmware | - | All | All | All |
| Operating System | Tp-link | Tl-war458 Firmware | - | All | All | All |
| Hardware | Tp-link | Tl-war900l | - | All | All | All |
| Operating System | Tp-link | Tl-war900l Firmware | - | All | All | All |
| Hardware | Tp-link | Tl-wvr1200l | - | All | All | All |
| Operating System | Tp-link | Tl-wvr1200l Firmware | - | All | All | All |
| Hardware | Tp-link | Tl-wvr1300g | - | All | All | All |
| Operating System | Tp-link | Tl-wvr1300g Firmware | - | All | All | All |
| Hardware | Tp-link | Tl-wvr1300l | - | All | All | All |
| Operating System | Tp-link | Tl-wvr1300l Firmware | - | All | All | All |
| Hardware | Tp-link | Tl-wvr1750l | - | All | All | All |
| Operating System | Tp-link | Tl-wvr1750l Firmware | - | All | All | All |
| Hardware | Tp-link | Tl-wvr2600l | - | All | All | All |
| Operating System | Tp-link | Tl-wvr2600l Firmware | - | All | All | All |
| Hardware | Tp-link | Tl-wvr300 | v4 | All | All | All |
| Hardware | Tp-link | Tl-wvr302 | v2 | All | All | All |
| Hardware | Tp-link | Tl-wvr4300l | - | All | All | All |
| Operating System | Tp-link | Tl-wvr4300l Firmware | - | All | All | All |
| Hardware | Tp-link | Tl-wvr450 | - | All | All | All |
| Hardware | Tp-link | Tl-wvr450g | v5 | All | All | All |
| Hardware | Tp-link | Tl-wvr450l | - | All | All | All |
| Operating System | Tp-link | Tl-wvr450l Firmware | - | All | All | All |
| Operating System | Tp-link | Tl-wvr450 Firmware | - | All | All | All |
| Hardware | Tp-link | Tl-wvr458 | - | All | All | All |
| Hardware | Tp-link | Tl-wvr458l | - | All | All | All |
| Operating System | Tp-link | Tl-wvr458l Firmware | - | All | All | All |
| Hardware | Tp-link | Tl-wvr458p | All | All | All | All |
| Operating System | Tp-link | Tl-wvr458p Firmware | - | All | All | All |
| Operating System | Tp-link | Tl-wvr458 Firmware | - | All | All | All |
| Hardware | Tp-link | Tl-wvr900g | v3 | All | All | All |
| Hardware | Tp-link | Tl-wvr900l | - | All | All | All |
| Operating System | Tp-link | Tl-wvr900l Firmware | - | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Wireless-Router-Vulnerability/TplinkInterfaceAuthenticatedRCE.txt at master · coincoin7/Wireless-Router-Vulnerability · GitHub | af854a3a-2127-422b-91ae-364da2661108 | github.com | Issue Tracking |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.