TP-Link Tl-r473g Firmware vulnerabilities

5 CVEs affecting TP-Link Tl-r473g Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-34555, published 2022-07-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-34555, published 2022-07-28. Critical severity, CVSS 9.8. EPSS: 23.1% chance of exploitation in the next 30 days. TP-LINK TL-R473G 2.0.1 Build 220529 Rel.65574n was discovered to contain a remote code execution vulnerability which is exploited via a crafted packet.
CVE-2017-16957, published 2017-11-27. High severity, CVSS 8.8. EPSS: 5.6% chance of exploitation in the next 30 days. TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the iface field of an admin/diagnostic command to…
CVE-2017-16958, published 2017-11-27. High severity, CVSS 8.8. EPSS: 2.9% chance of exploitation in the next 30 days. TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/bridge command to…
CVE-2017-16960, published 2017-11-27. High severity, CVSS 8.8. EPSS: 2.4% chance of exploitation in the next 30 days. TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/interface command to…
CVE-2017-16959, published 2017-11-27. Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days. The locale feature in cgi-bin/luci on TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allows remote authenticated users to test for the existence of arbitrary files by making an…