EUVD-2026-64252
GHSA-9q3j-g7jc-hfg2
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable (AV:N) but requires administrator credentials (PR:H); impact limited to router's own low-value configuration data and availability (C:L/I:L/A:L).
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
4DescriptionCVE.org
A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvram_get of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.
AnalysisAI
Command injection in TRENDnet TEW-823DRU firmware 1.1.02b01 allows a remote, authenticated attacker to inject arbitrary OS commands through the nvram_get function in the CLI Configuration Tool. Exploitation requires high-privilege credentials (PR:H per CVSS 4.0), limiting the attacker pool to those who have obtained administrative access. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires valid administrator-level (high-privilege) credentials on the target TEW-823DRU, as confirmed by PR:H in the CVSS 4.0 vector - unauthenticated exploitation is not supported by the available data. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 5.1 (Medium) accurately reflects a meaningful constraint: exploitation demands high-privilege administrator credentials (PR:H), which substantially narrows the realistic attacker pool compared to unauthenticated vulnerabilities. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker who has acquired administrator credentials to the TEW-823DRU - through default password reuse, credential stuffing against the management interface, or phishing the device owner - connects to the CLI Configuration Tool over the network and submits a crafted NVRAM parameter value containing shell metacharacters. The nvram_get function passes the unsanitized input directly to the underlying OS command interpreter, executing arbitrary commands with router firmware privileges. … |
| Remediation | No vendor-released patch has been identified at time of analysis; the provided references contain only researcher disclosures via VulDB and a public GitHub proof-of-concept, with no TRENDnet security advisory. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Tew 823Dru
View allSame weakness CWE-77 – Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today