TP-Link Tl-WVR2600L Firmware vulnerabilities

3 CVEs affecting TP-Link Tl-WVR2600L Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-17758, published 2017-12-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-17757, published 2017-12-19. High severity, CVSS 8.8. EPSS: 2.7% chance of exploitation in the next 30 days. TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the interface field of an admin/wportal command to cgi-bin/luci, related…
CVE-2017-17758, published 2017-12-19. High severity, CVSS 8.8. EPSS: 2.6% chance of exploitation in the next 30 days. TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the interface field of an admin/dhcps command to cgi-bin/luci, related to…
CVE-2017-16960, published 2017-11-27. High severity, CVSS 8.8. EPSS: 2.4% chance of exploitation in the next 30 days. TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/interface command to…