Description
A vulnerability has been found in TRENDnet TEW-831DR 1.0 (601.130.1.1410). Impacted is an unknown function of the file /boafrm/formSysCmd. The manipulation of the argument sysHost leads to command injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TRENDnet | TEW-831DR | 1.0 (601.130.1.1410) | — |
References
- VDB-323208 | TRENDnet TEW-831DR formSysCmd command injection vdb-entry technical-description
- VDB-323208 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #636833 | TRENDnet AC1200 Dual Band WiFi Router, model TEW-831DR Latest v1.0 (601.130.1.1410) Remote Code Execution third-party-advisory
- https://github.com/Darklab-limited/TRENDnet-AC1200-RCE/blob/main/TRENDnet%20Post-auth%20RCE.pdf broken-link