Tew 811dru Firmware
Monthly
OS command injection in TRENDnet TEW-811DRU firmware 1.0.2.0 lets an authenticated administrator execute arbitrary shell commands on the device by supplying shell metacharacters in the DeviceURL argument of the setDeviceURL function in uapply.cgi, exposing the httpd management interface to complete loss of confidentiality, integrity, and availability (CVSS 4.0 base 7.3; assessed CVSS 3.1 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). Publicly available exploit code exists, and although the vulnerability maps to EPSS 0.69% (~71st percentile) rather than confirmed active exploitation, the vendor did not respond to the early disclosure, so no vendor-released patch is identified at time of analysis. Only this discontinued SOHO router model on firmware 1.0.2.0 is affected, and exploitation requires a valid administrative web session, realistically obtained through default or weak credentials, plus network reachability of the management interface.
A vulnerability has been found in TRENDnet TEW-811DRU 1.0.10.0 and classified as critical. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
A vulnerability, which was classified as critical, was found in TRENDnet TEW-811DRU 1.0.10.0. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in TRENDNet TEW-811DRU 1.0.10.0. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in TRENDnet TEW-811DRU 1.0.10.0 and classified as critical. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability, which was classified as critical, was found in TRENDnet TEW-811DRU 1.0.10.0. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
OS command injection in TRENDnet TEW-811DRU firmware 1.0.2.0 lets an authenticated administrator execute arbitrary shell commands on the device by supplying shell metacharacters in the DeviceURL argument of the setDeviceURL function in uapply.cgi, exposing the httpd management interface to complete loss of confidentiality, integrity, and availability (CVSS 4.0 base 7.3; assessed CVSS 3.1 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). Publicly available exploit code exists, and although the vulnerability maps to EPSS 0.69% (~71st percentile) rather than confirmed active exploitation, the vendor did not respond to the early disclosure, so no vendor-released patch is identified at time of analysis. Only this discontinued SOHO router model on firmware 1.0.2.0 is affected, and exploitation requires a valid administrative web session, realistically obtained through default or weak credentials, plus network reachability of the management interface.
A vulnerability has been found in TRENDnet TEW-811DRU 1.0.10.0 and classified as critical. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
A vulnerability, which was classified as critical, was found in TRENDnet TEW-811DRU 1.0.10.0. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in TRENDNet TEW-811DRU 1.0.10.0. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in TRENDnet TEW-811DRU 1.0.10.0 and classified as critical. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability, which was classified as critical, was found in TRENDnet TEW-811DRU 1.0.10.0. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.