High severity7.2NVD Advisory· Published Jan 11, 2018· Updated Jun 17, 2026
CVE-2017-15636
CVE-2017-15636
Description
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-time variable in the webfilter.lua file.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
39- cpe:2.3:o:tp-link:er5110g_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:er5120g_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:er5510g_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:er5520g_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:r4149g_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:r4239g_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:r4299g_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:r473gp-ac_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:r473g_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:r473p-ac_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:r473_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:r478g\+_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:tp-link:r478_firmware:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:tp-link:r478_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:r478\+_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:r483g_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:r483_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:r488_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:war1300l_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:war1750l_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:war2600l_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:war302_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:war450l_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:war450_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:war458l_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:war458_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:war900l_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:wvr1300g_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:wvr1300l_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:wvr1750l_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:wvr2600l_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:wvr300_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:wvr302_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:wvr4300l_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:wvr450l_firmware:1.0161125:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:wvr450_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:wvr458l_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:wvr900g_firmware:3.0_170306:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:wvr900l_firmware:-:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- www.securityfocus.com/archive/1/541655/100/0/threadednvdExploitThird Party AdvisoryVDB Entry
- github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txtnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.