TP-Link Tl-r4299g Firmware vulnerabilities

3 CVEs affecting TP-Link Tl-r4299g Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-16959, published 2017-11-27.

More from TP-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-16957, published 2017-11-27. High severity, CVSS 8.8. EPSS: 5.6% chance of exploitation in the next 30 days. TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the iface field of an admin/diagnostic command to…
• CVE-2017-16958, published 2017-11-27. High severity, CVSS 8.8. EPSS: 2.9% chance of exploitation in the next 30 days. TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/bridge command to…
• CVE-2017-16959, published 2017-11-27. Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days. The locale feature in cgi-bin/luci on TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allows remote authenticated users to test for the existence of arbitrary files by making an…