Vulnerabilities > TP Link > Wvr900L > Critical

DATE CVE VULNERABILITY TITLE RISK
2018-01-11 CVE-2017-15613 Unspecified vulnerability in Tp-Link products
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-interface variable in the cmxddns.lua file.
network
low complexity
tp-link
critical
9.0
2018-01-11 CVE-2017-15614 Unspecified vulnerability in Tp-Link products
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-outif variable in the pptp_client.lua file.
network
low complexity
tp-link
critical
9.0
2018-01-11 CVE-2017-15615 Unspecified vulnerability in Tp-Link products
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the lcpechointerval variable in the pptp_client.lua file.
network
low complexity
tp-link
critical
9.0
2018-01-11 CVE-2017-15616 Unspecified vulnerability in Tp-Link products
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-interface variable in the phddns.lua file.
network
low complexity
tp-link
critical
9.0
2018-01-11 CVE-2017-15617 Unspecified vulnerability in Tp-Link products
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the iface variable in the interface_wan.lua file.
network
low complexity
tp-link
critical
9.0
2018-01-11 CVE-2017-15618 Unspecified vulnerability in Tp-Link products
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-enable variable in the pptp_client.lua file.
network
low complexity
tp-link
critical
9.0
2018-01-11 CVE-2017-15619 Unspecified vulnerability in Tp-Link products
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the pptphellointerval variable in the pptp_client.lua file.
network
low complexity
tp-link
critical
9.0
2018-01-11 CVE-2017-15620 Unspecified vulnerability in Tp-Link products
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-zone variable in the ipmac_import.lua file.
network
low complexity
tp-link
critical
9.0
2018-01-11 CVE-2017-15621 Unspecified vulnerability in Tp-Link products
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the olmode variable in the interface_wan.lua file.
network
low complexity
tp-link
critical
9.0
2018-01-11 CVE-2017-15622 Unspecified vulnerability in Tp-Link products
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-mppeencryption variable in the pptp_client.lua file.
network
low complexity
tp-link
critical
9.0