CVE-2017-15629 | BDVDB-2026-95087 Detail

Description#

TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-tunnelname variable in the pptp_client.lua file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt
http://www.securityfocus.com/archive/1/541655/100/0/threaded

Exploit#

No public exploit known

History#

Version 12018-01-11Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.