Vulnerabilities > TP Link

DATE CVE VULNERABILITY TITLE RISK
2018-01-11 CVE-2017-15620 Unspecified vulnerability in Tp-Link products
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-zone variable in the ipmac_import.lua file.
network
low complexity
tp-link
7.2
2018-01-11 CVE-2017-15619 Unspecified vulnerability in Tp-Link products
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the pptphellointerval variable in the pptp_client.lua file.
network
low complexity
tp-link
7.2
2018-01-11 CVE-2017-15618 Unspecified vulnerability in Tp-Link products
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-enable variable in the pptp_client.lua file.
network
low complexity
tp-link
7.2
2018-01-11 CVE-2017-15617 Unspecified vulnerability in Tp-Link products
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the iface variable in the interface_wan.lua file.
network
low complexity
tp-link
7.2
2018-01-11 CVE-2017-15616 Unspecified vulnerability in Tp-Link products
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-interface variable in the phddns.lua file.
network
low complexity
tp-link
7.2
2018-01-11 CVE-2017-15615 Unspecified vulnerability in Tp-Link products
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the lcpechointerval variable in the pptp_client.lua file.
network
low complexity
tp-link
7.2
2018-01-11 CVE-2017-15614 Unspecified vulnerability in Tp-Link products
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-outif variable in the pptp_client.lua file.
network
low complexity
tp-link
7.2
2018-01-11 CVE-2017-15613 Unspecified vulnerability in Tp-Link products
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-interface variable in the cmxddns.lua file.
network
low complexity
tp-link
7.2
2017-12-20 CVE-2017-17747 Missing Authentication for Critical Function vulnerability in Tp-Link Tl-Sg108E Firmware 1.0.0
Weak access controls in the Device Logout functionality on the TP-Link TL-SG108E v1.0.0 allow remote attackers to call the logout functionality, triggering a denial of service condition.
low complexity
tp-link CWE-306
6.5
2017-12-20 CVE-2017-17746 Missing Authentication for Critical Function vulnerability in Tp-Link Tl-Sg108E Firmware 1.0.0
Weak access control methods on the TP-Link TL-SG108E 1.0.0 allow any user on a NAT network with an authenticated administrator to access the device without entering user credentials.
low complexity
tp-link CWE-306
6.8