VDB
CVE-2017-15631
CVE-2017-15631
PUBLISHED
CVSS 7.199999809265137 HIGH
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-workmode variable in the pptp_client.lua file.
EPSS 4.37% · 91.2th percentile
Risk Scores
CVSS 3.0
7.199999809265137
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
4.37%
91.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| tp-link | r488_firmware | |
| tp-link | wvr450_firmware | |
| tp-link | wvr458l_firmware | |
| tp-link | r473p-ac_firmware | |
| tp-link | r483g_firmware | |
| tp-link | war458l_firmware | |
| tp-link | r4299g_firmware | |
| tp-link | wvr302_firmware | |
| tp-link | er5110g_firmware | |
| tp-link | er5120g_firmware | |
| tp-link | war1750l_firmware | |
| tp-link | wvr900g_firmware | 3.0_170306 |
| tp-link | war1300l_firmware | |
| tp-link | wvr1300l_firmware | |
| tp-link | war450l_firmware | |
| tp-link | wvr1300g_firmware | |
| tp-link | war900l_firmware | |
| tp-link | r478_firmware | |
| tp-link | r483_firmware | |
| tp-link | r478\+_firmware |
…and 19 more
Timeline
- Oct 20, 2017 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 25, 2021 EPSS Score
- Dec 29, 2021 EPSS Score
- Mar 2, 2022 EPSS Score
- May 4, 2022 EPSS Score
- Jul 6, 2022 EPSS Score
- Sep 8, 2022 EPSS Score
- Nov 10, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 16, 2023 EPSS Score