Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2017-16959 Details

Description

The locale feature in cgi-bin/luci on TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allows remote authenticated users to test for the existence of arbitrary files by making an operation=write;locale=%0d request, and then making an operation=read request with a crafted Accept-Language HTTP header, related to the set_sysinfo and get_sysinfo functions in /usr/lib/lua/luci/controller/locale.lua in uhttpd.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:6.5 MEDIUMVector:CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://github.com/coincoin7/Wireless-Router-Vulnerability/blob/master/TplinkLocalePathDisclosure.txt	CVE	ExploitThird Party Advisory
https://github.com/coincoin7/Wireless-Router-Vulnerability/blob/master/TplinkLocalePathDisclosure.txt	[email protected]	ExploitThird Party Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-22	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')	[email protected]

Affected Products

Product	Versions
tp-link tl-wvr300 firmware	All versions
CPE cpe:2.3:o:tp-link:tl-wvr300_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-wvr300	All versions
CPE cpe:2.3:h:tp-link:tl-wvr300:-:::::::* Remediation No remediation found in references.
tp-link tl-wvr302 firmware	All versions
CPE cpe:2.3:o:tp-link:tl-wvr302_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-wvr302	All versions
CPE cpe:2.3:h:tp-link:tl-wvr302:-:::::::* Remediation No remediation found in references.
tp-link tl-wvr450 firmware	All versions
CPE cpe:2.3:o:tp-link:tl-wvr450_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-wvr450	All versions
CPE cpe:2.3:h:tp-link:tl-wvr450:-:::::::* Remediation No remediation found in references.
tp-link tl-wvr450l firmware	All versions
CPE cpe:2.3:o:tp-link:tl-wvr450l_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-wvr450l	All versions
CPE cpe:2.3:h:tp-link:tl-wvr450l:-:::::::* Remediation No remediation found in references.
tp-link tl-wvr450g firmware	All versions
CPE cpe:2.3:o:tp-link:tl-wvr450g_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-wvr450g	All versions
CPE cpe:2.3:h:tp-link:tl-wvr450g:-:::::::* Remediation No remediation found in references.
tp-link tl-wvr458 firmware	All versions
CPE cpe:2.3:o:tp-link:tl-wvr458_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-wvr458	All versions
CPE cpe:2.3:h:tp-link:tl-wvr458:-:::::::* Remediation No remediation found in references.
tp-link tl-wvr458l firmware	All versions
CPE cpe:2.3:o:tp-link:tl-wvr458l_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-wvr458l	All versions
CPE cpe:2.3:h:tp-link:tl-wvr458l:-:::::::* Remediation No remediation found in references.
tp-link tl-wvr458p firmware	All versions
CPE cpe:2.3:o:tp-link:tl-wvr458p_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-wvr458p	All versions
CPE cpe:2.3:h:tp-link:tl-wvr458p:-:::::::* Remediation No remediation found in references.
tp-link tl-wvr900g firmware	All versions
CPE cpe:2.3:o:tp-link:tl-wvr900g_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-wvr900g	All versions
CPE cpe:2.3:h:tp-link:tl-wvr900g:-:::::::* Remediation No remediation found in references.
tp-link tl-wvr900l firmware	All versions
CPE cpe:2.3:o:tp-link:tl-wvr900l_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-wvr900l	All versions
CPE cpe:2.3:h:tp-link:tl-wvr900l:-:::::::* Remediation No remediation found in references.
tp-link tl-wvr1200l firmware	All versions
CPE cpe:2.3:o:tp-link:tl-wvr1200l_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-wvr1200l	All versions
CPE cpe:2.3:h:tp-link:tl-wvr1200l:-:::::::* Remediation No remediation found in references.
tp-link tl-wvr1300l firmware	All versions
CPE cpe:2.3:o:tp-link:tl-wvr1300l_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-wvr1300l	All versions
CPE cpe:2.3:h:tp-link:tl-wvr1300l:-:::::::* Remediation No remediation found in references.
tp-link tl-wvr1300g firmware	All versions
CPE cpe:2.3:o:tp-link:tl-wvr1300g_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-war1300g	All versions
CPE cpe:2.3:h:tp-link:tl-war1300g:-:::::::* Remediation No remediation found in references.
tp-link tl-wvr1750l firmware	All versions
CPE cpe:2.3:o:tp-link:tl-wvr1750l_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-wvr1750l	All versions
CPE cpe:2.3:h:tp-link:tl-wvr1750l:-:::::::* Remediation No remediation found in references.
tp-link tl-war2600l firmware	All versions
CPE cpe:2.3:o:tp-link:tl-war2600l_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-wvr2600l	All versions
CPE cpe:2.3:h:tp-link:tl-wvr2600l:-:::::::* Remediation No remediation found in references.
tp-link tl-wvr4300l firmware	All versions
CPE cpe:2.3:o:tp-link:tl-wvr4300l_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-wvr4300l	All versions
CPE cpe:2.3:h:tp-link:tl-wvr4300l:-:::::::* Remediation No remediation found in references.
tp-link tl-war302 firmware	All versions
CPE cpe:2.3:o:tp-link:tl-war302_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-war302	All versions
CPE cpe:2.3:h:tp-link:tl-war302:-:::::::* Remediation No remediation found in references.
tp-link tl-war450 firmware	All versions
CPE cpe:2.3:o:tp-link:tl-war450_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-war450	All versions
CPE cpe:2.3:h:tp-link:tl-war450:-:::::::* Remediation No remediation found in references.
tp-link tl-war450l firmware	All versions
CPE cpe:2.3:o:tp-link:tl-war450l_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-war450l	All versions
CPE cpe:2.3:h:tp-link:tl-war450l:-:::::::* Remediation No remediation found in references.
tp-link tl-war458 firmware	All versions
CPE cpe:2.3:o:tp-link:tl-war458_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-war458	All versions
CPE cpe:2.3:h:tp-link:tl-war458:-:::::::* Remediation No remediation found in references.
tp-link tl-war458l firmware	All versions
CPE cpe:2.3:o:tp-link:tl-war458l_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-war458l	All versions
CPE cpe:2.3:h:tp-link:tl-war458l:-:::::::* Remediation No remediation found in references.
tp-link tl-war900l firmware	All versions
CPE cpe:2.3:o:tp-link:tl-war900l_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-war900l	All versions
CPE cpe:2.3:h:tp-link:tl-war900l:-:::::::* Remediation No remediation found in references.
tp-link tl-war1200l firmware	All versions
CPE cpe:2.3:o:tp-link:tl-war1200l_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-war1200l	All versions
CPE cpe:2.3:h:tp-link:tl-war1200l:-:::::::* Remediation No remediation found in references.
tp-link tl-war1300l firmware	All versions
CPE cpe:2.3:o:tp-link:tl-war1300l_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-war1300l	All versions
CPE cpe:2.3:h:tp-link:tl-war1300l:-:::::::* Remediation No remediation found in references.
tp-link tl-war1750l firmware	All versions
CPE cpe:2.3:o:tp-link:tl-war1750l_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-war1750l	All versions
CPE cpe:2.3:h:tp-link:tl-war1750l:-:::::::* Remediation No remediation found in references.
tp-link tl-war2600l	All versions
CPE cpe:2.3:h:tp-link:tl-war2600l:-:::::::* Remediation No remediation found in references.
tp-link tl-er3210g firmware	All versions
CPE cpe:2.3:o:tp-link:tl-er3210g_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-er3210g	All versions
CPE cpe:2.3:h:tp-link:tl-er3210g:-:::::::* Remediation No remediation found in references.
tp-link tl-er3220g firmware	All versions
CPE cpe:2.3:o:tp-link:tl-er3220g_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-er3220g	All versions
CPE cpe:2.3:h:tp-link:tl-er3220g:-:::::::* Remediation No remediation found in references.
tp-link tl-er5110g firmware	All versions
CPE cpe:2.3:o:tp-link:tl-er5110g_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-er5110g	All versions
CPE cpe:2.3:h:tp-link:tl-er5110g:-:::::::* Remediation No remediation found in references.
tp-link tl-er5120g firmware	All versions
CPE cpe:2.3:o:tp-link:tl-er5120g_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-er5120g	All versions
CPE cpe:2.3:h:tp-link:tl-er5120g:-:::::::* Remediation No remediation found in references.
tp-link tl-er5510g firmware	All versions
CPE cpe:2.3:o:tp-link:tl-er5510g_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-er5510g	All versions
CPE cpe:2.3:h:tp-link:tl-er5510g:-:::::::* Remediation No remediation found in references.
tp-link tl-er5520g firmware	All versions
CPE cpe:2.3:o:tp-link:tl-er5520g_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-er5520g	All versions
CPE cpe:2.3:h:tp-link:tl-er5520g:-:::::::* Remediation No remediation found in references.
tp-link tl-er6110g firmware	All versions
CPE cpe:2.3:o:tp-link:tl-er6110g_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-er6110g	All versions
CPE cpe:2.3:h:tp-link:tl-er6110g:-:::::::* Remediation No remediation found in references.
tp-link tl-er6120g firmware	All versions
CPE cpe:2.3:o:tp-link:tl-er6120g_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-er6120g	All versions
CPE cpe:2.3:h:tp-link:tl-er6120g:-:::::::* Remediation No remediation found in references.
tp-link tl-er6220g firmware	All versions
CPE cpe:2.3:o:tp-link:tl-er6220g_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-er6220g	All versions
CPE cpe:2.3:h:tp-link:tl-er6220g:-:::::::* Remediation No remediation found in references.
tp-link tl-er6510g firmware	All versions
CPE cpe:2.3:o:tp-link:tl-er6510g_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-er6510g	All versions
CPE cpe:2.3:h:tp-link:tl-er6510g:-:::::::* Remediation No remediation found in references.
tp-link tl-er6520g firmware	All versions
CPE cpe:2.3:o:tp-link:tl-er6520g_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-er6520g	All versions
CPE cpe:2.3:h:tp-link:tl-er6520g:-:::::::* Remediation No remediation found in references.
tp-link tl-er7520g firmware	All versions
CPE cpe:2.3:o:tp-link:tl-er7520g_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-er7520g	All versions
CPE cpe:2.3:h:tp-link:tl-er7520g:-:::::::* Remediation No remediation found in references.
tp-link tl-r473 firmware	All versions
CPE cpe:2.3:o:tp-link:tl-r473_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-r473	All versions
CPE cpe:2.3:h:tp-link:tl-r473:-:::::::* Remediation No remediation found in references.
tp-link tl-r473g firmware	All versions
CPE cpe:2.3:o:tp-link:tl-r473g_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-r473g	All versions
CPE cpe:2.3:h:tp-link:tl-r473g:-:::::::* Remediation No remediation found in references.
tp-link tl-r473p-ac firmware	All versions
CPE cpe:2.3:o:tp-link:tl-r473p-ac_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-r473p-ac	All versions
CPE cpe:2.3:h:tp-link:tl-r473p-ac:-:::::::* Remediation No remediation found in references.
tp-link tl-r479gp-ac firmware	All versions
CPE cpe:2.3:o:tp-link:tl-r479gp-ac_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-r473gp-ac	All versions
CPE cpe:2.3:h:tp-link:tl-r473gp-ac:-:::::::* Remediation No remediation found in references.
tp-link tl-r478 firmware	All versions
CPE cpe:2.3:o:tp-link:tl-r478_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-r478	All versions
CPE cpe:2.3:h:tp-link:tl-r478:-:::::::* Remediation No remediation found in references.
tp-link tl-r478+ firmware	All versions
CPE cpe:2.3:o:tp-link:tl-r478+_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-r478+	All versions
CPE cpe:2.3:h:tp-link:tl-r478+:-:::::::* Remediation No remediation found in references.
tp-link tl-r478g firmware	All versions
CPE cpe:2.3:o:tp-link:tl-r478g_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-r478g	All versions
CPE cpe:2.3:h:tp-link:tl-r478g:-:::::::* Remediation No remediation found in references.
tp-link tl-r478g+ firmware	All versions
CPE cpe:2.3:o:tp-link:tl-r478g+_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-r478g+	All versions
CPE cpe:2.3:h:tp-link:tl-r478g+:-:::::::* Remediation No remediation found in references.
tp-link tl-r479p-ac firmware	All versions
CPE cpe:2.3:o:tp-link:tl-r479p-ac_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-r479p-ac	All versions
CPE cpe:2.3:h:tp-link:tl-r479p-ac:-:::::::* Remediation No remediation found in references.
tp-link tl-r479gp-ac	All versions
CPE cpe:2.3:h:tp-link:tl-r479gp-ac:-:::::::* Remediation No remediation found in references.
tp-link tl-r479gpe-ac firmware	All versions
CPE cpe:2.3:o:tp-link:tl-r479gpe-ac_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-r479gpe-ac	All versions
CPE cpe:2.3:h:tp-link:tl-r479gpe-ac:-:::::::* Remediation No remediation found in references.
tp-link tl-r483 firmware	All versions
CPE cpe:2.3:o:tp-link:tl-r483_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-r483	All versions
CPE cpe:2.3:h:tp-link:tl-r483:-:::::::* Remediation No remediation found in references.
tp-link tl-r483g firmware	All versions
CPE cpe:2.3:o:tp-link:tl-r483g_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-r483g	All versions
CPE cpe:2.3:h:tp-link:tl-r483g:-:::::::* Remediation No remediation found in references.
tp-link tl-r488 firmware	All versions
CPE cpe:2.3:o:tp-link:tl-r488_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-r488	All versions
CPE cpe:2.3:h:tp-link:tl-r488:-:::::::* Remediation No remediation found in references.
tp-link tl-r4149g firmware	All versions
CPE cpe:2.3:o:tp-link:tl-r4149g_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-r4149g	All versions
CPE cpe:2.3:h:tp-link:tl-r4149g:-:::::::* Remediation No remediation found in references.
tp-link tl-r4239g firmware	All versions
CPE cpe:2.3:o:tp-link:tl-r4239g_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-r4239g	All versions
CPE cpe:2.3:h:tp-link:tl-r4239g:-:::::::* Remediation No remediation found in references.
tp-link tl-r4299g firmware	All versions
CPE cpe:2.3:o:tp-link:tl-r4299g_firmware:-:::::::* Remediation No remediation found in references.
tp-link tl-r4299g	All versions
CPE cpe:2.3:h:tp-link:tl-r4299g:-:::::::* Remediation No remediation found in references.

Change History

5 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
May 13, 2026	CVE Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Dec 14, 2017	Initial Analysis	[email protected]

CVE-2017-16959 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation