Command injection in the NTPSyncWithHost.cgi endpoint of TRENDnet TEW-800MB firmware 1.0.1.0 allows an authenticated remote attacker to execute arbitrary operating-system commands on the router by manipulating input processed by the sub_F934 function. The CVSS vector specifies PR:L, so the attacker must first hold a valid low-privilege account or an established management session against the device; exploitation is not fully unauthenticated. Publicly available exploit code exists (linked from NVD via a third-party write-up), but the flaw is not confirmed actively exploited (CISA KEV), and exposure is bounded by the single firmware/model combination and the usual LAN-side reachability of a consumer router's management interface.
Command injection in TRENDnet TEW-800MB firmware 1.0.1.0 allows an authenticated low-privilege attacker who can reach the web Management Interface to execute arbitrary operating-system commands through a crafted WizardConfigured parameter in a request to /goform/wizardset. Publicly available exploit code exists, and exploitation is bounded by the need for valid credentials and reachability of the management interface; no CISA KEV entry is provided in the available intelligence. The device is at sharply higher risk if WAN-side remote management is enabled, otherwise exposure is typically limited to the LAN.
A stack-based buffer overflow in the Tenda WH450 router (firmware version 1.0.0.18) can be triggered by sending a crafted 'delno' argument to the /goform/PPTPUserSetting configuration endpoint, allowing memory corruption that can be leveraged for code execution or denial of service. Exploitation requires authenticated administrative access to the device's web management interface, since the vulnerable handler is a privileged configuration endpoint (CVSS PR:H), though the attack itself is network-reachable with no user interaction. Publicly available exploit code exists in a GitHub proof-of-concept, and no vendor-released patch has been identified at time of analysis; the affected scope is limited to this specific firmware version, so risk concentrates on devices with exposed or default-credentialed management interfaces.
Stack-based buffer overflow in Tenda WH450 firmware version 1.0.0.18 allows an attacker with administrative access to the router's web management interface to achieve remote code execution by sending an overlong 'ip1' parameter to the /goform/PPTPServer endpoint. The vulnerability requires high privileges (CVSS PR:H) but no user interaction, and publicly available exploit code exists, making it a realistic risk when the admin panel is exposed to untrusted networks or default credentials are used. The CVSS 4.0 score is 7.3, and no confirmed active exploitation (CISA KEV) has been identified at time of analysis.