Description
A vulnerability was detected in TRENDnet TEW-821DAP up to 1.12B01. The affected element is the function tools_diagnostic. The manipulation results in os command injection. The exploit is now public and may be used. The vendor explains: "That firmware version will only work on our hardware version v1.xR. We have already EOL that product 8 years ago and are no longer selling". This vulnerability only affects products that are no longer supported by the maintainer.
Severity
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:PCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:RCVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:RAV:A/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:URExploitation Context
as of October 13, 2026- Its current EPSS score (9.8%) is higher than that of 25% of CISA KEV entries.
Affected Products
| Vendor | Product | Affected versions |
|---|---|---|
| TRENDnet | TRENDnet TEW-821DAP | 1.12B01 |
References
4 LinksRecord Details
More from TRENDnet
TRENDnet TEW-821DAP Firmware Udpate diagnostic tools_diagnostic os command injection
TRENDnet TEW-713RE addRouting sub_421494 command injection
TRENDnet TEW-713RE setSysAdm command injection
Trendnet TEW-657BRM setup.cgi add_wps_client os command injection
Related
Tool categories
CVE record data © The MITRE Corporation, used under the CVE Terms of Use. Exploited-in-the-wild data from the CISA Known Exploited Vulnerabilities catalog (CC0). Exploit prediction scores by FIRST EPSS (first.org/epss). This site is not endorsed or certified by MITRE, NVD, CISA, or FIRST.