TEW-813DRU EUVD-2026-58718

Exploitation requires a low-privileged authenticated session to the device, specifically credentials valid against the vsftpd FTP service running on the TEW-813DRU. The vulnerability is only present on firmware version 1.01b01 of the TEW-813DRU, an end-of-life device. High attack complexity (AC:H) is confirmed by both the CVSS vector and the description, which characterizes exploitability as 'difficult' - precise exploitation conditions beyond authentication are not fully disclosed in available sources. Network reachability to the device's FTP port is required. What limits exploitation: authentication is mandatory (PR:L), attack complexity is high, impact is confined to low-integrity write (no data exfiltration, no availability impact), and the device must be network-exposed on its FTP port.

Real-world risk is low. The CVSS 4.0 vector (AV:N/AC:H/PR:L/UI:N) scores 2.3, reflecting that exploitation requires authenticated low-privileged access and high attack complexity, with only low integrity impact and no confidentiality or availability impact. No EPSS score was provided in the input data; this absence is noted. The vulnerability is not listed in the CISA KEV catalog, and no public exploit or POC has been identified. The 'Privilege Escalation' tag from VulDB suggests the integrity write to vsftpd.conf could be chained toward privilege escalation, but no concrete escalation path is confirmed from available data - this must be treated as inferred rather than confirmed. End-of-life status removes any patching route, but the narrow impact scope (VI:L only) and high complexity substantially limit the operational risk compared to its EOL designation alone.

An attacker with low-privileged credentials to the device's FTP service - obtained through credential stuffing, default credentials, or prior compromise - remotely accesses the misconfigured vsftpd.conf file. Due to incorrect default permissions, the attacker can read or overwrite FTP server settings, potentially redirecting FTP sessions, disabling access controls, or setting the stage for further privilege escalation on the embedded Linux environment. No public POC exists, and the high attack complexity suggests exploitation is not trivial even with access.