Vulnerabilities (CVE)

Filtered by vendor Tp-link Subscribe
Filtered by product Er5120g
Total 25 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-15630 1 Tp-link 76 Er5110g, Er5110g Firmware, Er5120g and 73 more 2024-02-04 9.0 HIGH 7.2 HIGH
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-remotesubnet variable in the pptp_client.lua file.
CVE-2017-15629 1 Tp-link 76 Er5110g, Er5110g Firmware, Er5120g and 73 more 2024-02-04 9.0 HIGH 7.2 HIGH
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-tunnelname variable in the pptp_client.lua file.
CVE-2017-15626 1 Tp-link 76 Er5110g, Er5110g Firmware, Er5120g and 73 more 2024-02-04 9.0 HIGH 7.2 HIGH
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-bindif variable in the pptp_server.lua file.
CVE-2017-15635 1 Tp-link 76 Er5110g, Er5110g Firmware, Er5120g and 73 more 2024-02-04 9.0 HIGH 7.2 HIGH
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the max_conn variable in the session_limits.lua file.
CVE-2017-15620 1 Tp-link 76 Er5110g, Er5110g Firmware, Er5120g and 73 more 2024-02-04 9.0 HIGH 7.2 HIGH
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the new-zone variable in the ipmac_import.lua file.