TP-Link WVR900G Firmware vulnerabilities

25 CVEs affecting TP-Link WVR900G Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-15637, published 2018-01-11.

More from TP-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-15635, published 2018-01-11. High severity, CVSS 7.2. EPSS: 4.4% chance of exploitation in the next 30 days. TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the max_conn variable in the session_limits.lua file.
• CVE-2017-15634, published 2018-01-11. High severity, CVSS 7.2. EPSS: 4.4% chance of exploitation in the next 30 days. TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the name variable in the wportal.lua file.
• CVE-2017-15633, published 2018-01-11. High severity, CVSS 7.2. EPSS: 4.4% chance of exploitation in the next 30 days. TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-ipgroup variable in the session_limits.lua file.
• CVE-2017-15631, published 2018-01-11. High severity, CVSS 7.2. EPSS: 4.4% chance of exploitation in the next 30 days. TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-workmode variable in the pptp_client.lua file.
• CVE-2017-15630, published 2018-01-11. High severity, CVSS 7.2. EPSS: 4.4% chance of exploitation in the next 30 days. TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-remotesubnet variable in the pptp_client.lua file.
• CVE-2017-15629, published 2018-01-11. High severity, CVSS 7.2. EPSS: 4.4% chance of exploitation in the next 30 days. TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-tunnelname variable in the pptp_client.lua file.
• CVE-2017-15628, published 2018-01-11. High severity, CVSS 7.2. EPSS: 4.4% chance of exploitation in the next 30 days. TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the lcpechointerval variable in the pptp_server.lua file.
• CVE-2017-15627, published 2018-01-11. High severity, CVSS 7.2. EPSS: 4.4% chance of exploitation in the next 30 days. TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-pns variable in the pptp_client.lua file.
• CVE-2017-15626, published 2018-01-11. High severity, CVSS 7.2. EPSS: 4.4% chance of exploitation in the next 30 days. TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-bindif variable in the pptp_server.lua file.
• CVE-2017-15625, published 2018-01-11. High severity, CVSS 7.2. EPSS: 4.4% chance of exploitation in the next 30 days. TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-olmode variable in the pptp_client.lua file.

Latest

• CVE-2017-15637, published 2018-01-11. High severity, CVSS 7.2. EPSS: 4.2% chance of exploitation in the next 30 days. TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the pptphellointerval variable in the pptp_server.lua file.
• CVE-2017-15636, published 2018-01-11. High severity, CVSS 7.2. EPSS: 4.2% chance of exploitation in the next 30 days. TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-time variable in the webfilter.lua file.
• CVE-2017-15632, published 2018-01-11. High severity, CVSS 7.2. EPSS: 3.1% chance of exploitation in the next 30 days. TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-mppeencryption variable in the pptp_server.lua file.