PT-2024-14308 · Trendnet · Trendnet Tew-822Dre

CVE-2023-51835

·

Published

2024-02-01

·

Updated

2024-08-28

CVSS v3.1

6.8

Medium

VectorAV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions TRENDnet TEW-822DRE version 1.03B02
Description An issue allows a local attacker to execute arbitrary code via the ipv4 ping parameter in the "/boafrm/formSystemCheck" API endpoint.
Recommendations For TRENDnet TEW-822DRE version 1.03B02, consider disabling the ipv4 ping parameter in the "/boafrm/formSystemCheck" API endpoint as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2023-51835

Affected Products

Trendnet Tew-822Dre