EUVD-2026-18408Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V1 - Encoding and Sanitization OS command sanitization, avoid shell exec
MITRE ATT&CK
2 techniques across 1 tactic: Execution The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Impact | While the CVSS score of 6.3 (Medium severity) reflects network-exploitable command injection with low attack complexity and minimal privilege requirement (PR:L), real-world risk is severely constrained by the device's obsolescence. The CVSS vector indicates low attack complexity (AC:L) and no user interaction (UI:N), but the device has been discontinued for 14+ years with zero vendor support. Exploitation requires authentication (PR:L confirms login credentials), reducing opportunistic attack surface. The presence of publicly available exploit code increases risk for legacy deployments that remain operational; however, this is fundamentally a legacy-device issue rather than an active threat to modern infrastructure. Organizations with these devices should prioritize decommissioning over patching. |
| Exploit ScenarioDerived | An attacker with valid login credentials to the Trendnet TEW-657BRM web interface navigates to setup.cgi and submits a crafted request to the ping_test function with a malicious payload embedded in the c4_IPAddr parameter (e.g., '192.168.1.1; rm -rf /'). Due to lack of input sanitization, the OS executes the injected command with the privileges of the router's web server process. Publicly available proof-of-concept code (documented on GitHub) lowers the barrier to exploitation for actors targeting legacy deployments. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Apr 02, 2026
OS command injection in Trendnet TEW-657BRM 1.00.1 ping_test function allows authenticated remote attackers to execute arbitrary commands via manipulation of the c4_IPAddr parameter in /setup.cgi. Publicly available exploit code exists. The device has been end-of-life since June 2011 and is no longer supported by the vendor, making patching infeasible for affected users.
RemediationAI
No vendor-released patch is available, as the manufacturer has discontinued the product and ceased support. Organizations operating legacy Trendnet TEW-657BRM devices should immediately plan replacement with modern, actively-supported networking equipment. Until replacement is feasible, mitigate exposure by restricting network access to the device's management interface (restrict access to setup.cgi and port 80/443 via firewall rules) and disabling remote management if available. Do not rely on this device for production or security-sensitive networks. Additional information on the device's deprecated status is available from Trendnet's official product support page.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The vulnerability exploits improper input validation in the ping_test function of the Trendnet TEW-657BRM router's web interface (setup.cgi). The c4_IPAddr parameter is passed unsanitized to an underlying OS command execution routine, violating CWE-78 (Improper Neutralization of Special Elements used in an OS Command). The affected device is a wireless router from the mid-2000s; the vulnerability allows command injection through a web-accessible CGI script requiring only low-privilege authentication. CPE cpe:2.3:a:trendnet:tew-657brm:*:*:*:*:*:*:*:* identifies all versions of this product line.
Know when Tew 657Brm gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Primary rating from Vendor (VulDB) · only source for this CVE.
CVSS VectorVendor: VulDB
Lifecycle Timeline
4DescriptionCVE.org
A vulnerability was detected in Trendnet TEW-657BRM 1.00.1. Affected is the function ping_test of the file /setup.cgi. Performing a manipulation of the argument c4_IPAddr results in os command injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor confirms, that "[t]he product in question (...) has been discontinued and end of life since June 23, 2011, that is more than 14 years ago. We no longer provide support for this product, so we are not able to confirm the vulnerabilities. We will make an announcement on our website's product support page and notify customers who registered their products with us." This vulnerability only affects products that are no longer supported by the maintainer.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
GitHub
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
OS command injection occurs when an application passes unsanitized user input directly into system shell commands.
Related Vulnerabilities in Trendnet TEW-657BRM Command Injection
View all 5More in Tew 657Brm
View allStack-based buffer overflow in Trendnet TEW-657BRM 1.00.1 wireless router allows authenticated remote attackers to achie
Stack-based buffer overflow in Trendnet TEW-657BRM router firmware 1.00.1 allows authenticated remote attackers to achie
Exploit-DB