What’s Vulnerable › Vulnerabilities

CVE-2017-17758

• Severity: high (CVSS 8.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-12-19 · updated 2026-06-17
• Weakness: CWE-78

Description

TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the interface field of an admin/dhcps command to cgi-bin/luci, related to the zone_get_iface_bydev function in /usr/lib/lua/luci/controller/admin/dhcps.lua in uhttpd.

Affected products

• TP-Link Tl-War1200L Firmware: all versions
• TP-Link Tl-War1300L Firmware: all versions
• TP-Link Tl-War1750L Firmware: all versions
• TP-Link Tl-War2600L Firmware: all versions
• TP-Link Tl-War450L Firmware: all versions
• TP-Link Tl-War458L Firmware: all versions
• TP-Link Tl-War900L Firmware: all versions
• TP-Link Tl-Wvr1200L Firmware: all versions
• TP-Link Tl-Wvr1300L Firmware: all versions
• TP-Link Tl-Wvr1750L Firmware: all versions
• TP-Link Tl-Wvr2600L Firmware: all versions
• TP-Link Tl-Wvr4300L Firmware: all versions
• TP-Link Tl-Wvr450L Firmware: all versions
• TP-Link Tl-Wvr458L Firmware: all versions
• TP-Link Tl-Wvr900L Firmware: all versions

References

• https://github.com/L1ZhaoXin/Router-Vulnerability-Research/blob/master/Tplink_LUCI_Dhcps_Authenticated_RCE_Record.txt
• https://github.com/L1ZhaoXin/Router-Vulnerability-Research/blob/master/Tplink_LUCI_Dhcps_Authenticated_RCE_Record.txt

Get alerted when CVE-2017-17758 or the next vulnerability affects your stack