vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2017-17757

N/A
Published: December 19, 2017 at 07:00 AM UTC
Updated: June 17, 2026 at 01:11 AM UTC
30 products affected across 1 vendorTl WAR1300L FirmwareTl WVR1750L FirmwareTl WAR900L Firmware

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 3%

Description

TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the interface field of an admin/wportal command to cgi-bin/luci, related to the get_device_byif function in /usr/lib/lua/luci/controller/admin/wportal.lua in uhttpd.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Tl WAR1200L Firmware· TP-Link
95%
All versions
tp-link-tl-war1200l (same device)
Tl WAR1300L Firmware· TP-Link
95%
All versions
tp-link-tl-war1300l (same device)
Tl WAR1750L Firmware· TP-Link
95%
All versions
tp-link-tl-war1750l (same device)
Tl WAR2600L Firmware· TP-Link
95%
All versions
tp-link-tl-war2600l (same device)
Tl WAR450L Firmware· TP-Link
95%
All versions
tp-link-tl-war450l (same device)
Tl WAR458L Firmware· TP-Link
95%
All versions
tp-link-tl-war458l (same device)
Tl WAR900L Firmware· TP-Link
95%
All versions
tp-link-tl-war900l (same device)
Tl WVR1200L Firmware· TP-Link
95%
All versions
tp-link-tl-wvr1200l (same device)
Tl WVR1300L Firmware· TP-Link
95%
All versions
tp-link-tl-wvr1300l (same device)
Tl WVR1750L Firmware· TP-Link
95%
All versions
tp-link-tl-wvr1750l (same device)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (1)

x_refsource_MISCExploitIssue TrackingThird Party Advisory
Source: [email protected]
https://github.com/L1ZhaoXin/Router-Vulnerability-Research/blob/master/Tplink_LUCI_Wechat_Authenticated_RCE_Record.txt

CVSS

9HIGH[email protected]
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-78

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card