CVE-2017-15621

CVE-2017-15621 describes a critical command injection vulnerability affecting TP-Link WVR, WAR, and ER series devices. Remote authenticated administrators can exploit this flaw by manipulating the 'olmode' variable within the 'interface_wan.lua' file to execute arbitrary commands. With a CVSS score of 7.2 (High), this vulnerability presents a significant risk due to its network-based attack vector, low attack complexity, and high potential for confidentiality, integrity, and availability compromise. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit or ExploitDB, the lack of community discussion and media coverage suggests limited public awareness.