Description
A vulnerability was identified in TRENDnet TEW-713RE up to 1.02. The impacted element is an unknown function of the file /goform/setSysAdm. The manipulation of the argument admuser leads to command injection. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:PCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:RCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:RAV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:URExploitation Context
as of October 14, 2026- Its current EPSS score (8.5%) is higher than that of 24% of CISA KEV entries.
Affected Products
| Vendor | Product | Affected versions |
|---|---|---|
| TRENDnet | TRENDnet TEW-713RE | 1.02 |
References
4 LinksRecord Details
More from TRENDnet
TRENDnet TEW-713RE addRouting sub_421494 command injection
TRENDnet TEW-821DAP tools_diagnostic os command injection
Trendnet TEW-657BRM setup.cgi add_wps_client os command injection
Trendnet TEW-657BRM setup.cgi edit os command injection
Related
Tool categories
CVE record data © The MITRE Corporation, used under the CVE Terms of Use. Exploited-in-the-wild data from the CISA Known Exploited Vulnerabilities catalog (CC0). Exploit prediction scores by FIRST EPSS (first.org/epss). This site is not endorsed or certified by MITRE, NVD, CISA, or FIRST.