TP-Link Tl-WVR900L Firmware vulnerabilities

6 CVEs affecting TP-Link Tl-WVR900L Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-17758, published 2017-12-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-16957, published 2017-11-27. High severity, CVSS 8.8. EPSS: 5.6% chance of exploitation in the next 30 days. TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the iface field of an admin/diagnostic command to…
CVE-2017-16958, published 2017-11-27. High severity, CVSS 8.8. EPSS: 2.9% chance of exploitation in the next 30 days. TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/bridge command to…
CVE-2017-17757, published 2017-12-19. High severity, CVSS 8.8. EPSS: 2.7% chance of exploitation in the next 30 days. TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the interface field of an admin/wportal command to cgi-bin/luci, related…
CVE-2017-17758, published 2017-12-19. High severity, CVSS 8.8. EPSS: 2.6% chance of exploitation in the next 30 days. TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the interface field of an admin/dhcps command to cgi-bin/luci, related to…
CVE-2017-16960, published 2017-11-27. High severity, CVSS 8.8. EPSS: 2.4% chance of exploitation in the next 30 days. TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/interface command to…
CVE-2017-16959, published 2017-11-27. Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days. The locale feature in cgi-bin/luci on TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allows remote authenticated users to test for the existence of arbitrary files by making an…