Tew 713re Firmware
Monthly
OS command injection in TRENDnet TEW-713RE firmware 1.0.2 allows unauthenticated remote attackers who can reach the device's HTTP management interface to execute arbitrary OS commands via a crafted SZCMD parameter sent to /goformX/formFSrvX. The issue is CWE-77 and publicly available exploit code exists, with the provided CVSS 4.0 base score of 8.9 and EPSS 1.23% (79th percentile). The practical exposure risk depends on whether the admin interface is reachable from untrusted networks, since the extender's management UI is typically LAN/Wi-Fi bound and internet exploitation requires remote management, port forwarding, or an on-LAN foothold.
OS command injection in TRENDnet TEW-713RE firmware 1.0.2 allows unauthenticated remote attackers who can reach the device's HTTP management interface to execute arbitrary OS commands via a crafted SZCMD parameter sent to /goformX/formFSrvX. The issue is CWE-77 and publicly available exploit code exists, with the provided CVSS 4.0 base score of 8.9 and EPSS 1.23% (79th percentile). The practical exposure risk depends on whether the admin interface is reachable from untrusted networks, since the extender's management UI is typically LAN/Wi-Fi bound and internet exploitation requires remote management, port forwarding, or an on-LAN foothold.