deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-0005
Published: 2018-01-10
Description: QFX and EX Series switches configured to drop traffic when the MAC move limit is exceeded will forward traffic instead of dropping traffic. This can lead to denials of services or other unintended conditions. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D40; 15.1X53 versions prior to 15.1X53-D55; 15.1 versions prior to 15.1R7.
CVSS Score: 7.4 (HIGH)
CWE: CWE-754
References: http://www.securitytracker.com/id/1040182; https://kb.juniper.net/JSA10833; http://www.securitytracker.com/id/1040182
CVE: CVE-2018-0006
Published: 2018-01-10
Description: A high rate of VLAN authentication attempts sent from an adjacent host on the local broadcast domain can trigger high memory utilization by the BBE subscriber management daemon (bbe-smgd), and lead to a denial of service condition. The issue was caused by attempting to process an unbounded number of pending VLAN authentication requests, leading to excessive memory allocation. This issue only affects devices configured for DHCPv4/v6 over AE auto-sensed VLANs, utilized in Broadband Edge (BBE) deployments. Other configurations are unaffected by this issue. Affected releases are Juniper Networks Junos OS: 15.1 versions prior to 15.1R6-S2, 15.1R7; 16.1 versions prior to 16.1R5-S1, 16.1R6; 16.2 versions prior to 16.2R2-S2, 16.2R3; 17.1 versions prior to 17.1R2-S5, 17.1R3; 17.2 versions prior to 17.2R2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: http://www.securitytracker.com/id/1040184; https://kb.juniper.net/JSA10834; http://www.securitytracker.com/id/1040184
CVE: CVE-2018-0007
Published: 2018-01-10
Description: An unauthenticated network-based attacker able to send a maliciously crafted LLDP packet to the local segment, through a local segment broadcast, may be able to cause a Junos device to enter an improper boundary check condition allowing a memory corruption to occur, leading to a denial of service. Further crafted packets may be able to sustain the denial of service condition. Score: 6.5 MEDIUM (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Further, if the attacker is authenticated on the target device receiving and processing the malicious LLDP packet, while receiving the crafted packets, the attacker may be able to perform command or arbitrary code injection over the target device thereby elevating their permissions and privileges, and taking control of the device. Score: 7.8 HIGH (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) An unauthenticated network-based attacker able to send a maliciously crafted LLDP packet to one or more local segments, via LLDP proxy / tunneling agents or other LLDP through Layer 3 deployments, through one or more local segment broadcasts, may be able to cause multiple Junos devices to enter an improper boundary check condition allowing a memory corruption to occur, leading to multiple distributed Denials of Services. These Denials of Services attacks may have cascading Denials of Services to adjacent connected devices, impacts network devices, servers, workstations, etc. Further crafted packets may be able to sustain these Denials of Services conditions. Score 6.8 MEDIUM (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H) Further, if the attacker is authenticated on one or more target devices receiving and processing these malicious LLDP packets, while receiving the crafted packets, the attacker may be able to perform command or arbitrary code injection over multiple target devices thereby elevating their permissions and privileges, and taking control multiple devices. Score: 7.8 HIGH (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D71; 12.3 versions prior to 12.3R12-S7; 12.3X48 versions prior to 12.3X48-D55; 14.1 versions prior to 14.1R8-S5, 14.1R9; 14.1X53 versions prior to 14.1X53-D46, 14.1X53-D50, 14.1X53-D107; 14.2 versions prior to 14.2R7-S9, 14.2R8; 15.1 versions prior to 15.1F2-S17, 15.1F5-S8, 15.1F6-S8, 15.1R5-S7, 15.1R7; 15.1X49 versions prior to 15.1X49-D90; 15.1X53 versions prior to 15.1X53-D65; 16.1 versions prior to 16.1R4-S6, 16.1R5; 16.1X65 versions prior to 16.1X65-D45; 16.2 versions prior to 16.2R2; 17.1 versions prior to 17.1R2. No other Juniper Networks products or platforms are affected by this issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-94, CWE-119
References: http://www.securitytracker.com/id/1040181; https://kb.juniper.net/JSA10830; http://www.securitytracker.com/id/1040181
CVE: CVE-2018-0008
Published: 2018-01-10
Description: An unauthenticated root login may allow upon reboot when a commit script is used. A commit script allows a device administrator to execute certain instructions during commit, which is configured under the [system scripts commit] stanza. Certain commit scripts that work without a problem during normal commit may cause unexpected behavior upon reboot which can leave the system in a state where root CLI login is allowed without a password due to the system reverting to a "safe mode" authentication state. Lastly, only logging in physically to the console port as root, with no password, will work. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D71 on SRX; 12.3X48 versions prior to 12.3X48-D55 on SRX; 14.1 versions prior to 14.1R9; 14.1X53 versions prior to 14.1X53-D40 on QFX, EX; 14.2 versions prior to 14.2R7-S9, 14.2R8; 15.1 versions prior to 15.1F5-S7, 15.1F6-S8, 15.1R5-S6, 15.1R6; 15.1X49 versions prior to 15.1X49-D110 on SRX; 15.1X53 versions prior to 15.1X53-D232 on QFX5200/5110; 15.1X53 versions prior to 15.1X53-D49, 15.1X53-D470 on NFX; 15.1X53 versions prior to 15.1X53-D65 on QFX10K; 16.1 versions prior to 16.1R2. No other Juniper Networks products or platforms are affected by this issue.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-287
References: http://www.securitytracker.com/id/1040186; https://kb.juniper.net/JSA10835; https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E
CVE: CVE-2018-0009
Published: 2018-01-10
Description: On Juniper Networks SRX series devices, firewall rules configured to match custom application UUIDs starting with zeros can match all TCP traffic. Due to this issue, traffic that should have been blocked by other rules is permitted to flow through the device resulting in a firewall bypass condition. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D71 on SRX series; 12.3X48 versions prior to 12.3X48-D55 on SRX series; 15.1X49 versions prior to 15.1X49-D100 on SRX series.
CVSS Score: 5.4 (MEDIUM)
References: http://www.securityfocus.com/bid/102491; http://www.securitytracker.com/id/1040187; https://kb.juniper.net/JSA10836
CVE: CVE-2018-0010
Published: 2018-01-10
Description: A vulnerability in the Juniper Networks Junos Space Security Director allows a user who does not have SSH access to a device to reuse the URL that was created for another user to perform SSH access. Affected releases are all versions of Junos Space Security Director prior to 17.2R1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269
References: https://kb.juniper.net/JSA10840; https://kb.juniper.net/JSA10840
CVE: CVE-2018-0011
Published: 2018-01-10
Description: A reflected cross site scripting (XSS) vulnerability in Junos Space may potentially allow a remote authenticated user to inject web script or HTML and steal sensitive data and credentials from a session, and to perform administrative actions on the Junos Space network management device.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securitytracker.com/id/1040189; https://kb.juniper.net/JSA10838; http://www.securitytracker.com/id/1040189
CVE: CVE-2018-0012
Published: 2018-01-10
Description: Junos Space is affected by a privilege escalation vulnerability that may allow a local authenticated attacker to gain root privileges.
CVSS Score: 7.8 (HIGH)
References: http://www.securitytracker.com/id/1040189; https://kb.juniper.net/JSA10838; http://www.securitytracker.com/id/1040189
CVE: CVE-2018-0013
Published: 2018-01-10
Description: A local file inclusion vulnerability in Juniper Networks Junos Space Network Management Platform may allow an authenticated user to retrieve files from the system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1040189; https://kb.juniper.net/JSA10838; http://www.securitytracker.com/id/1040189
CVE: CVE-2018-0014
Published: 2018-01-10
Description: Juniper Networks ScreenOS devices do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is often detected as CVE-2003-0001. The issue affects all versions of Juniper Networks ScreenOS prior to 6.3.0r25.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1040185; https://kb.juniper.net/JSA10841; http://www.securitytracker.com/id/1040185
CVE: CVE-2018-5332
Published: 2018-01-11
Description: In the Linux kernel through 3.2, the rds_message_alloc_sgs() function does not validate a value that is used during DMA page allocation, leading to a heap-based out-of-bounds write (related to the rds_rdma_extra_size function in net/rds/rdma.c).
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c095508770aebf1b9218e77026e48345d719b17c; http://www.securityfocus.com/bid/102507; https://access.redhat.com/errata/RHSA-2018:0470
CVE: CVE-2018-5333
Published: 2018-01-11
Description: In the Linux kernel through 4.14.13, the rds_cmsg_atomic function in net/rds/rdma.c mishandles cases where page pinning fails or an invalid address is supplied, leading to an rds_atomic_free_op NULL pointer dereference.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7d11f77f84b27cef452cee332f4e[PII_REDACTED]37; http://packetstormsecurity.com/files/156053/Reliable-Datagram-Sockets-RDS-rds_atomic_free_op-Privilege-Escalation.html; http://www.securityfocus.com/bid/102510
CVE: CVE-2018-0118
Published: 2018-01-11
Description: A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to perform a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the web-based management interface to click a link that is designed to submit malicious input to the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information on the targeted device. Cisco Bug IDs: CSCvg51264.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/102478; http://www.securitytracker.com/id/1040193; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180110-ucm
CVE: CVE-2017-4949
Published: 2018-01-11
Description: VMware Workstation and Fusion contain a use-after-free vulnerability in VMware NAT service when IPv6 mode is enabled. This issue may allow a guest to execute code on the host. Note: IPv6 mode for VMNAT is not enabled by default.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/102489; http://www.securitytracker.com/id/1040161; https://www.vmware.com/security/advisories/VMSA-2018-0005.html
CVE: CVE-2017-4950
Published: 2018-01-11
Description: VMware Workstation and Fusion contain an integer overflow vulnerability in VMware NAT service when IPv6 mode is enabled. This issue may lead to an out-of-bound read which can then be used to execute code on the host in conjunction with other issues. Note: IPv6 mode for VMNAT is not enabled by default.
CVSS Score: 7.0 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/102490; http://www.securitytracker.com/id/1040161; https://www.vmware.com/security/advisories/VMSA-2018-0005.html
CVE: CVE-2012-6667
Published: 2018-01-11
Description: Cross-site scripting (XSS) vulnerability in vbshout.php in DragonByte Technologies vBShout module for vBulletin allows remote attackers to inject arbitrary web script or HTML via the shout parameter in a shout action.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/48525; http://www.exploit-db.com/exploits/18644; http://www.securityfocus.com/bid/52685
CVE: CVE-2014-0087
Published: 2018-01-11
Description: The check_privileges method in vmdb/app/controllers/application_controller.rb in ManageIQ, as used in Red Hat CloudForms Management Engine (CFME), allows remote authenticated users to bypass authorization and gain privileges by leveraging improper RBAC checking, related to the rbac_user_edit action.
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: https://bugzilla.redhat.com/show_bug.cgi?id=1067623; https://github.com/ManageIQ/manageiq/issues/1581; https://bugzilla.redhat.com/show_bug.cgi?id=1067623
CVE: CVE-2014-5068
Published: 2018-01-11
Description: Directory traversal vulnerability in the web application in Symmetricom s350i 2.70.15 allows remote attackers to read arbitrary files via a (1) ../ (dot dot slash) or (2) ..\ (dot dot forward slash) before a file name.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-5068/; https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-5068/
CVE: CVE-2014-5070
Published: 2018-01-11
Description: Symmetricom s350i 2.70.15 allows remote authenticated users to gain privileges via vectors related to pushing unauthenticated users to the login page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: https://www.portcullis.co.uk/security-research-and-downloads/security-advisories/cve-2014-5070/; https://www.portcullis.co.uk/security-research-and-downloads/security-advisories/cve-2014-5070/
CVE: CVE-2017-15613
Published: 2018-01-11
Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-interface variable in the cmxddns.lua file.
CVSS Score: 7.2 (HIGH)
References: http://www.securityfocus.com/archive/1/541655/100/0/threaded; https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt; http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE: CVE-2017-15614
Published: 2018-01-11
Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-outif variable in the pptp_client.lua file.
CVSS Score: 7.2 (HIGH)
References: http://www.securityfocus.com/archive/1/541655/100/0/threaded; https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt; http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE: CVE-2017-15615
Published: 2018-01-11
Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the lcpechointerval variable in the pptp_client.lua file.
CVSS Score: 7.2 (HIGH)
References: http://www.securityfocus.com/archive/1/541655/100/0/threaded; https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt; http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE: CVE-2017-15616
Published: 2018-01-11
Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-interface variable in the phddns.lua file.
CVSS Score: 7.2 (HIGH)
References: http://www.securityfocus.com/archive/1/541655/100/0/threaded; https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt; http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE: CVE-2017-15617
Published: 2018-01-11
Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the iface variable in the interface_wan.lua file.
CVSS Score: 7.2 (HIGH)
References: http://www.securityfocus.com/archive/1/541655/100/0/threaded; https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt; http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE: CVE-2017-15618
Published: 2018-01-11
Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-enable variable in the pptp_client.lua file.
CVSS Score: 7.2 (HIGH)
References: http://www.securityfocus.com/archive/1/541655/100/0/threaded; https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt; http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE: CVE-2017-15619
Published: 2018-01-11
Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the pptphellointerval variable in the pptp_client.lua file.
CVSS Score: 7.2 (HIGH)
References: http://www.securityfocus.com/archive/1/541655/100/0/threaded; https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt; http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE: CVE-2017-15620
Published: 2018-01-11
Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-zone variable in the ipmac_import.lua file.
CVSS Score: 7.2 (HIGH)
References: http://www.securityfocus.com/archive/1/541655/100/0/threaded; https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt; http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE: CVE-2017-15621
Published: 2018-01-11
Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the olmode variable in the interface_wan.lua file.
CVSS Score: 7.2 (HIGH)
References: http://www.securityfocus.com/archive/1/541655/100/0/threaded; https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt; http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE: CVE-2017-15622
Published: 2018-01-11
Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-mppeencryption variable in the pptp_client.lua file.
CVSS Score: 7.2 (HIGH)
References: http://www.securityfocus.com/archive/1/541655/100/0/threaded; https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt; http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE: CVE-2017-15623
Published: 2018-01-11
Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-enable variable in the pptp_server.lua file.
CVSS Score: 7.2 (HIGH)
References: http://www.securityfocus.com/archive/1/541655/100/0/threaded; https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt; http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE: CVE-2017-15624
Published: 2018-01-11
Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-authtype variable in the pptp_server.lua file.
CVSS Score: 7.2 (HIGH)
References: http://www.securityfocus.com/archive/1/541655/100/0/threaded; https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt; http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE: CVE-2017-15625
Published: 2018-01-11
Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-olmode variable in the pptp_client.lua file.
CVSS Score: 7.2 (HIGH)
References: http://www.securityfocus.com/archive/1/541655/100/0/threaded; https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt; http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE: CVE-2017-15626
Published: 2018-01-11
Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-bindif variable in the pptp_server.lua file.
CVSS Score: 7.2 (HIGH)
References: http://www.securityfocus.com/archive/1/541655/100/0/threaded; https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt; http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE: CVE-2017-15627
Published: 2018-01-11
Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-pns variable in the pptp_client.lua file.
CVSS Score: 7.2 (HIGH)
References: http://www.securityfocus.com/archive/1/541655/100/0/threaded; https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt; http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE: CVE-2017-15628
Published: 2018-01-11
Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the lcpechointerval variable in the pptp_server.lua file.
CVSS Score: 7.2 (HIGH)
References: http://www.securityfocus.com/archive/1/541655/100/0/threaded; https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt; http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE: CVE-2017-15629
Published: 2018-01-11
Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-tunnelname variable in the pptp_client.lua file.
CVSS Score: 7.2 (HIGH)
References: http://www.securityfocus.com/archive/1/541655/100/0/threaded; https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt; http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE: CVE-2017-15630
Published: 2018-01-11
Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-remotesubnet variable in the pptp_client.lua file.
CVSS Score: 7.2 (HIGH)
References: http://www.securityfocus.com/archive/1/541655/100/0/threaded; https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt; http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE: CVE-2017-15631
Published: 2018-01-11
Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-workmode variable in the pptp_client.lua file.
CVSS Score: 7.2 (HIGH)
References: http://www.securityfocus.com/archive/1/541655/100/0/threaded; https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt; http://www.securityfocus.com/archive/1/541655/100/0/threaded
CVE: CVE-2017-15632
Published: 2018-01-11
Description: TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-mppeencryption variable in the pptp_server.lua file.
CVSS Score: 7.2 (HIGH)
References: http://www.securityfocus.com/archive/1/541655/100/0/threaded; https://github.com/chunibalon/Vulnerability/blob/master/CVE-2017-15613_to_CVE-2017-15637.txt; http://www.securityfocus.com/archive/1/541655/100/0/threaded