Dacjun

**Name of the Vulnerable Software and Affected Versions** TRENDnet TEW-751DR (affected versions not specified) TRENDnet TEW-752DRU (affected versions not specified) TRENDnet TEW733GR versions 1.03B01 through 1.03B03 **Description** An OS command injection flaw exists in the Web Management Backend component. The issue occurs within the `fwrite()` function of the `pigwidgeon.cgi` file, where improper handling of the `service` argument allows a remote attacker to execute arbitrary operating system commands. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.