CVE-2017-15634
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary...
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the name variable in the wportal.lua file.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the name variable in the wportal.lua file.
- Record
CVE-2017-15634- CVSS 3.0
- 7.2 High
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 9.0 High
AV:N/AC:L/Au:S/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the name variable in the wportal.lua file.
- Record
CVE-2017-15634- Updated
- 2026-11-02
EUVDEUVD-2017-7085 No score
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the name variable in the wportal.lua file.
- Record
EUVD-2017-7085- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h749-34wp-72hp
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary...
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the name variable in the wportal.lua file.
- Record
GHSA-h749-34wp-72hp- CVSS 3.0
- 7.2 High
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
- tp-link er5110g firmware
- tp-link er5120g firmware
- tp-link er5510g firmware
- tp-link er5520g firmware
- tp-link r4149g firmware
- tp-link r4239g firmware
- tp-link r4299g firmware
- tp-link r473 firmware
- tp-link r473g firmware
- tp-link r473gp-ac firmware
- tp-link r473p-ac firmware
- tp-link r478\+ firmware
Show 26 moreShow less
- tp-link r478 firmware
- tp-link r478g\+ firmware
- tp-link r483 firmware
- tp-link r483g firmware
- tp-link r488 firmware
- tp-link war1300l firmware
- tp-link war1750l firmware
- tp-link war2600l firmware
- tp-link war302 firmware
- tp-link war450 firmware
- tp-link war450l firmware
- tp-link war458 firmware
- tp-link war458l firmware
- tp-link war900l firmware
- tp-link wvr1300g firmware
- tp-link wvr1300l firmware
- tp-link wvr1750l firmware
- tp-link wvr2600l firmware
- tp-link wvr300 firmware
- tp-link wvr302 firmware
- tp-link wvr4300l firmware
- tp-link wvr450 firmware
- tp-link wvr450l firmware
- tp-link wvr458l firmware
- tp-link wvr900g firmware
- tp-link wvr900l firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-15634 is a high vulnerability (CVSS 7.2) in Tp-link Er5110g Firmware, published January 11, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.37%, the 91st percentile. No source names a fixed version.