Puzzor

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices (affected versions not specified) Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the `pptphellointerval` variable in the pptp server.lua file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices (affected versions not specified) Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the `lcpechointerval` variable in the pptp server.lua file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices (affected versions not specified) Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the `new-tunnelname` variable in the `pptp client.lua` file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices (affected versions not specified) Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the `new-remotesubnet` variable in the `pptp client.lua` file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices (affected versions not specified) Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the `new-workmode` variable in the `pptp client.lua` file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices (affected versions not specified) Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the `new-mppeencryption` variable in the `pptp server.lua` file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices (affected versions not specified) Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the `new-ipgroup` variable in the session limits.lua file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices (affected versions not specified) Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the `name` variable in the wportal.lua file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices (affected versions not specified) Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the `max conn` variable in the session limits.lua file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices (affected versions not specified) Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the `new-time` variable in the `webfilter.lua` file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices (affected versions not specified) Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the `new-interface` variable in the cmxddns.lua file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices (affected versions not specified) Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the `new-outif` variable in the `pptp client.lua` file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices (affected versions not specified) Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the `lcpechointerval` variable in the `pptp client.lua` file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices (affected versions not specified) Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the `new-interface` variable in the phddns.lua file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices (affected versions not specified) Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the `iface` variable in the interface wan.lua file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices (affected versions not specified) Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the `new-enable` variable in the `pptp client.lua` file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices (affected versions not specified) Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the `pptphellointerval` variable in the `pptp client.lua` file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices (affected versions not specified) Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the `new-zone` variable in the `ipmac import.lua` file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices (affected versions not specified) Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the `olmode` variable in the interface wan.lua file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: TP-Link WVR, WAR and ER devices (affected versions not specified) Description: The issue allows remote authenticated administrators to execute arbitrary commands via command injection in the `new-mppeencryption` variable in the `pptp client.lua` file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.