EUVD-2026-17331
GHSA-rqfv-fqvg-7p3j
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V1 - Encoding and Sanitization Command injection prevention
MITRE ATT&CK
1 technique across 1 tactic: Execution The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Impact | The CVSS 6.3 score (medium severity) reflects the authenticated requirement (PR:L) that moderates the risk, despite network accessibility and low attack complexity. The EPSS metric and SSVC framework signal meaningful but not critical risk: exploitation is straightforward (AC:L) and the technical impact spans confidentiality, integrity, and availability (C:L/I:L/A:L), but the authentication gate limits spontaneous mass exploitation. However, the presence of publicly available exploit code combined with lack of vendor response significantly elevates practical risk for any organization running this older TRENDnet model. This is not a high-CVSS-but-low-risk issue; it is a functional vulnerability with real exploitation barriers (authentication) but serious consequences if the attacker gains initial access. |
| Exploit ScenarioDerived | An authenticated attacker with valid router credentials (obtained through credential compromise, weak defaults, or social engineering) connects to the TRENDnet TEW-713RE web interface and submits a crafted POST request to /goform/addRouting with a malicious dest parameter containing shell command injection payloads such as dest=$(reboot) or dest= |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 31, 2026
Command injection in TRENDnet TEW-713RE firmware up to version 1.02 allows authenticated remote attackers to execute arbitrary commands via manipulation of the dest parameter in the /goform/addRouting function. The vulnerability has a CVSS score of 6.3 and publicly available exploit code exists; the vendor has not responded to early disclosure attempts, leaving affected devices without an official patch.
RemediationAI
No vendor-released patch identified at time of analysis. TRENDnet has not responded to early disclosure notifications regarding this vulnerability. Organizations operating TEW-713RE devices should consider implementing network segmentation to restrict access to the router's administrative interface, enforce strong authentication credentials to limit credential compromise risk, and monitor for exploitation attempts targeting the /goform/addRouting endpoint. Users should review TRENDnet's support page for any available firmware updates or consider upgrading to a newer router model if this device is critical to network operations. A detailed technical breakdown of the vulnerability is available at https://github.com/panda666-888/vuls/blob/main/trendnet/tew-713re/addRouting.md.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The vulnerability resides in the sub_421494 function within the /goform/addRouting endpoint of TRENDnet TEW-713RE router firmware. This endpoint processes routing configuration requests and fails to properly validate or sanitize the dest parameter before passing it to shell command execution, creating a CWE-77 (Improper Neutralization of Special Elements used in a Command) condition. Attackers can inject shell metacharacters and command separators to break out of the intended command context and execute arbitrary system commands with the privileges of the router's web service process. The attack vector is network-based but requires authenticated access (PR:L per CVSS vector), meaning the attacker must first obtain valid router credentials.
Know when Tew 713Re gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
4DescriptionCVE.org
A vulnerability was determined in TRENDnet TEW-713RE up to 1.02. The affected element is the function sub_421494 of the file /goform/addRouting. Executing a manipulation of the argument dest can lead to command injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
OS command injection occurs when an application passes unsanitized user input directly into system shell commands.
Exploit-DB