vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2017-16960

N/A
Published: November 27, 2017 at 10:00 AM UTC
Updated: June 17, 2026 at 01:10 AM UTC
91 products affected across 1 vendorTl ER5120G FirmwareTl WVR1750L FirmwareTl WAR1300L Firmware

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 2%

Description

TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/interface command to cgi-bin/luci, related to the get_device_byif function in /usr/lib/lua/luci/controller/admin/interface.lua in uhttpd.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Tl ER3210G Firmware· TP-Link
95%
All versions
tp-link-tl-er3210g (same device)
Tl ER3220G Firmware· TP-Link
95%
All versions
tp-link-tl-er3220g (same device)
Tl ER5110G Firmware· TP-Link
95%
All versions
tp-link-tl-er5110g (same device)
Tl ER5120G Firmware· TP-Link
95%
All versions
tp-link-tl-er5120g (same device)
Tl ER5510G· TP-Link
95%
23
Tl ER5520G· TP-Link
95%
23
Tl ER6110G Firmware· TP-Link
95%
All versions
tp-link-tl-er6110g (same device)
Tl ER6120G· TP-Link
95%
2
Tl ER6220G Firmware· TP-Link
95%
All versions
tp-link-tl-er6220g (same device)
Tl ER6510G Firmware· TP-Link
95%
All versions
tp-link-tl-er6510g (same device)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (1)

x_refsource_MISCIssue Tracking
Source: [email protected]
https://github.com/coincoin7/Wireless-Router-Vulnerability/blob/master/TplinkInterfaceAuthenticatedRCE.txt

CVSS

9HIGH[email protected]
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-78

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card