High severity8.8NVD Advisory· Published Nov 27, 2017· Updated May 13, 2026

CVE-2017-16960

Description

TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/interface command to cgi-bin/luci, related to the get_device_byif function in /usr/lib/lua/luci/controller/admin/interface.lua in uhttpd.

Affected products

TP-Link/Tl Er5510g2 versions
cpe:2.3:h:tp-link:tl-er5510g:v2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:h:tp-link:tl-er5510g:v2:*:*:*:*:*:*:*
- cpe:2.3:h:tp-link:tl-er5510g:v3:*:*:*:*:*:*:*
TP-Link/Tl Er5520g2 versions
cpe:2.3:h:tp-link:tl-er5520g:v2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:h:tp-link:tl-er5520g:v2:*:*:*:*:*:*:*
- cpe:2.3:h:tp-link:tl-er5520g:v3:*:*:*:*:*:*:*
TP-Link/Tl Er6120g
cpe:2.3:h:tp-link:tl-er6120g:v2:*:*:*:*:*:*:*
TP-Link/Tl Er6520g2 versions
cpe:2.3:h:tp-link:tl-er6520g:v2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:h:tp-link:tl-er6520g:v2:*:*:*:*:*:*:*
- cpe:2.3:h:tp-link:tl-er6520g:v3:*:*:*:*:*:*:*
TP-Link/Tl R4239g
cpe:2.3:h:tp-link:tl-r4239g:v2:*:*:*:*:*:*:*
TP-Link/Tl R4299g
cpe:2.3:h:tp-link:tl-r4299g:v2:*:*:*:*:*:*:*
TP-Link/Tl R473
cpe:2.3:h:tp-link:tl-r473:v5:*:*:*:*:*:*:*
TP-Link/Tl R478g\+
cpe:2.3:h:tp-link:tl-r478g\+:v3:*:*:*:*:*:*:*
TP-Link/Tl R478\+2 versions
cpe:2.3:h:tp-link:tl-r478:v6:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:h:tp-link:tl-r478:v6:*:*:*:*:*:*:*
- cpe:2.3:h:tp-link:tl-r478\+:v7:*:*:*:*:*:*:*
TP-Link/Tl R483g
cpe:2.3:h:tp-link:tl-r483g:v2:*:*:*:*:*:*:*
TP-Link/Tl R483
cpe:2.3:h:tp-link:tl-r483:v5:*:*:*:*:*:*:*
TP-Link/Tl R488
cpe:2.3:h:tp-link:tl-r488:v5:*:*:*:*:*:*:*
TP-Link/Tl Wvr300
cpe:2.3:h:tp-link:tl-wvr300:v4:*:*:*:*:*:*:*
TP-Link/Tl Wvr302
cpe:2.3:h:tp-link:tl-wvr302:v2:*:*:*:*:*:*:*
TP-Link/Tl Wvr450g
cpe:2.3:h:tp-link:tl-wvr450g:v5:*:*:*:*:*:*:*
TP-Link/Tl Wvr900g
cpe:2.3:h:tp-link:tl-wvr900g:v3:*:*:*:*:*:*:*
TP-Link/Tl Er3210g Firmware
cpe:2.3:o:tp-link:tl-er3210g_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl Er3220g Firmware
cpe:2.3:o:tp-link:tl-er3220g_firmware:*:*:*:*:*:*:*:*
TP-Link/Tl Er5110g Firmware
cpe:2.3:o:tp-link:tl-er5110g_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl Er5120g Firmware
cpe:2.3:o:tp-link:tl-er5120g_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl Er6110g Firmware
cpe:2.3:o:tp-link:tl-er6110g_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl Er6220g Firmware
cpe:2.3:o:tp-link:tl-er6220g_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl Er6510g Firmware
cpe:2.3:o:tp-link:tl-er6510g_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl Er7520g Firmware
cpe:2.3:o:tp-link:tl-er7520g_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl R4149g Firmware
cpe:2.3:o:tp-link:tl-r4149g_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl R473g Firmware
cpe:2.3:o:tp-link:tl-r473g_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl R473gp Ac Firmware
cpe:2.3:o:tp-link:tl-r473gp-ac_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl R473p Ac Firmware
cpe:2.3:o:tp-link:tl-r473p-ac_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl R478g\+ Firmware
cpe:2.3:o:tp-link:tl-r478g_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl R479gp Ac Firmware
cpe:2.3:o:tp-link:tl-r479gp-ac_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl R479gpe Ac Firmware
cpe:2.3:o:tp-link:tl-r479gpe-ac_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl R479p Ac Firmware
cpe:2.3:o:tp-link:tl-r479p-ac_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl War1200l Firmware
cpe:2.3:o:tp-link:tl-war1200l_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl War1300l Firmware
cpe:2.3:o:tp-link:tl-war1300l_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl War1750l Firmware
cpe:2.3:o:tp-link:tl-war1750l_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl War2600l Firmware
cpe:2.3:o:tp-link:tl-war2600l_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl War302 Firmware
cpe:2.3:o:tp-link:tl-war302_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl War450 Firmware
cpe:2.3:o:tp-link:tl-war450_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl War450l Firmware
cpe:2.3:o:tp-link:tl-war450l_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl War458 Firmware
cpe:2.3:o:tp-link:tl-war458_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl War458l Firmware
cpe:2.3:o:tp-link:tl-war458l_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl War900l Firmware
cpe:2.3:o:tp-link:tl-war900l_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl Wvr1200l Firmware
cpe:2.3:o:tp-link:tl-wvr1200l_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl Wvr1300g Firmware
cpe:2.3:o:tp-link:tl-wvr1300g_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl Wvr1300l Firmware
cpe:2.3:o:tp-link:tl-wvr1300l_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl Wvr1750l Firmware
cpe:2.3:o:tp-link:tl-wvr1750l_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl Wvr2600l Firmware
cpe:2.3:o:tp-link:tl-wvr2600l_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl Wvr4300l Firmware
cpe:2.3:o:tp-link:tl-wvr4300l_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl Wvr450 Firmware
cpe:2.3:o:tp-link:tl-wvr450_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl Wvr450l Firmware
cpe:2.3:o:tp-link:tl-wvr450l_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl Wvr458 Firmware
cpe:2.3:o:tp-link:tl-wvr458_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl Wvr458l Firmware
cpe:2.3:o:tp-link:tl-wvr458l_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl Wvr458p Firmware
cpe:2.3:o:tp-link:tl-wvr458p_firmware:-:*:*:*:*:*:*:*
TP-Link/Tl Wvr900l Firmware
cpe:2.3:o:tp-link:tl-wvr900l_firmware:-:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

github.com/coincoin7/Wireless-Router-Vulnerability/blob/master/TplinkInterfaceAuthenticatedRCE.txtnvdIssue Tracking

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000