CVE-2017-17758
HIGHTP-Link TL-WVR and TL-WAR Firmware - Authenticated Remote Code Execution via Dhcps Interface Field
Title source: llmDescription
TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the interface field of an admin/dhcps command to cgi-bin/luci, related to the zone_get_iface_bydev function in /usr/lib/lua/luci/controller/admin/dhcps.lua in uhttpd.
References (1)
Core 1
Core References
Exploit, Issue Tracking, Third Party Advisory x_refsource_misc
https://github.com/L1ZhaoXin/Router-Vulnerability-Research/blob/master/Tplink_LUCI_Dhcps_Authenticated_RCE_Record.txt
Scores
CVSS v3
8.8
EPSS
0.0128
EPSS Percentile
79.8%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-78
Status
published
Products (15)
tp-link/tl-war1200l_firmware
tp-link/tl-war1300l_firmware
tp-link/tl-war1750l_firmware
tp-link/tl-war2600l_firmware
tp-link/tl-war450l_firmware
tp-link/tl-war458l_firmware
tp-link/tl-war900l_firmware
tp-link/tl-wvr1200l_firmware
tp-link/tl-wvr1300l_firmware
tp-link/tl-wvr1750l_firmware
... and 5 more
Published
Dec 19, 2017
Tracked Since
Feb 18, 2026