TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute…
Priority LOW 39Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA.
Summary
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command injection in the pptphellointerval variable in the pptp_client.lua file.
Why it matters now
EPSS 0.04367 91st percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 76
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:tp-link:er5110g_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:er5110g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:er5120g_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:er5120g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:er5510g_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:er5510g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:er5520g_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:er5520g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:r4149g_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:r4149g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
- cpe:2.3:o:tp-link:er5110g_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:er5110g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:er5120g_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:er5120g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:er5510g_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:er5510g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:er5520g_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:er5520g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:r4149g_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:r4149g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
Show 66 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:tp-link:r4239g_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:r4239g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:r4299g_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:r4299g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:r473gp-ac_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:r473gp-ac:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:r473g_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:r473g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:r473p-ac_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:r473p-ac:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:r473_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:r473:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:r478g\+_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:r478g\+:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:r478_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:r478:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:r478\+_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:r478\+:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:r483g_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:r483g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:r483_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:r483:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:r488_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:r488:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:war1300l_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:war1300l:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:war1750l_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:war1750l:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:war2600l_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:war2600l:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:war302_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:war302:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:war450l_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:war450l:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:war450_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:war450:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:war458l_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:war458l:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:war458_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:war458:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:war900l_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:war900l:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:wvr1300g_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:wvr1300g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:wvr1300l_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:wvr1300l:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:wvr1750l_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:wvr1750l:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:wvr2600l_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:wvr2600l:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:wvr300_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:wvr300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:wvr302_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:wvr302:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:wvr4300l_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:wvr4300l:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:wvr450l_firmware:1.0161125:*:*:*:*:*:*:* | 1.0161125 | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:wvr450l:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:wvr450_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:wvr450:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:wvr458l_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:wvr458l:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:wvr900g_firmware:3.0_170306:*:*:*:*:*:*:* | 3.0_170306 | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:wvr900g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
| cpe:2.3:o:tp-link:wvr900l_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | TP-Link |
| cpe:2.3:h:tp-link:wvr900l:-:*:*:*:*:*:*:* | not specified by NVD | Running on | TP-Link |
- cpe:2.3:o:tp-link:r4239g_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:r4239g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:r4299g_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:r4299g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:r473gp-ac_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:r473gp-ac:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:r473g_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:r473g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:r473p-ac_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:r473p-ac:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:r473_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:r473:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:r478g\+_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:r478g\+:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:r478_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:r478:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:r478\+_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:r478\+:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:r483g_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:r483g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:r483_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:r483:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:r488_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:r488:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:war1300l_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:war1300l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:war1750l_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:war1750l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:war2600l_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:war2600l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:war302_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:war302:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:war450l_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:war450l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:war450_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:war450:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:war458l_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:war458l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:war458_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:war458:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:war900l_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:war900l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:wvr1300g_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:wvr1300g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:wvr1300l_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:wvr1300l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:wvr1750l_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:wvr1750l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:wvr2600l_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:wvr2600l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:wvr300_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:wvr300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:wvr302_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:wvr302:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:wvr4300l_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:wvr4300l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:wvr450l_firmware:1.0161125:*:*:*:*:*:*:* Versions 1.0161125 Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:wvr450l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:wvr450_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:wvr450:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:wvr458l_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:wvr458l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:wvr900g_firmware:3.0_170306:*:*:*:*:*:*:* Versions 3.0_170306 Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:wvr900g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
- cpe:2.3:o:tp-link:wvr900l_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TP-Link
- cpe:2.3:h:tp-link:wvr900l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TP-Link
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2017-15619
- 2026-10-03 Alias added: GHSA-6p9v-hq35-2xcf
References
More TP-Link Er5110g Firmware vulnerabilities
- TI-2017-11429 TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute… CVSS 3.0HIGH 7.2
- TI-2017-11428 TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute… CVSS 3.0HIGH 7.2
- TI-2017-11427 TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute… CVSS 3.0HIGH 7.2
- TI-2017-11426 TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute… CVSS 3.0HIGH 7.2
- TI-2017-11425 TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute… CVSS 3.0HIGH 7.2
- TI-2017-11423 TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute… CVSS 3.0HIGH 7.2
Sources
- CVE-2017-15619 · CVE Program
- CVE-2017-15619 · NVD
- FIRST EPSS
- GHSA-6p9v-hq35-2xcf · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences