Description
A vulnerability was identified in TRENDnet TEW-713RE up to 1.02. The impacted element is an unknown function of the file /goform/setSysAdm. The manipulation of the argument admuser leads to command injection. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:PCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:RCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:RAV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:URAffected Products
| Vendor | Product | Affected versions |
|---|---|---|
| TRENDnet | TEW-713RE | 1.02 |
References
4 LinksRecord Details
More from TRENDnet
TRENDnet TEW-821DAP tools_diagnostic os command injection
TRENDnet TEW-713RE addRouting sub_421494 command injection
TRENDnet TEW-821DAP Firmware Udpate diagnostic tools_diagnostic os command injection
TRENDnet TEW-432BRP formWPS command injection
Related Tool Categories
Tool categories that test for or protect against this vulnerability class.
CVE record data © The MITRE Corporation, used under the CVE Terms of Use. Exploited-in-the-wild data from the CISA Known Exploited Vulnerabilities catalog (CC0). Exploit prediction scores by FIRST EPSS (first.org/epss). This site is not endorsed or certified by MITRE, NVD, CISA, or FIRST.