An issue in TRENDnet TEW-822DRE v.1.03B02 allows a local attacker to execute arbitrary code via the parameters ipv4_ping in the /boafrm/formSystemCheck.
References
| Link | Resource |
|---|---|
| https://warp-desk-89d.notion.site/TEW-822DRE-5289eb95796749c2878843519ab451d8 | Exploit Third Party Advisory |
| https://www.trendnet.com/support/support-detail.asp?prod=105_TEW-822DRE | Product |
| https://warp-desk-89d.notion.site/TEW-822DRE-5289eb95796749c2878843519ab451d8 | Exploit Third Party Advisory |
| https://www.trendnet.com/support/support-detail.asp?prod=105_TEW-822DRE | Product |
Configurations
Configuration 1 (hide)
| AND |
|
History
01 Apr 2025, 15:06
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:trendnet:tew-822dre:-:*:*:*:*:*:*:* cpe:2.3:o:trendnet:tew-822dre_firmware:1.03b02:*:*:*:*:*:*:* |
|
| First Time |
Trendnet
Trendnet tew-822dre Firmware Trendnet tew-822dre |
|
| References | () https://warp-desk-89d.notion.site/TEW-822DRE-5289eb95796749c2878843519ab451d8 - Exploit, Third Party Advisory | |
| References | () https://www.trendnet.com/support/support-detail.asp?prod=105_TEW-822DRE - Product |
21 Nov 2024, 08:38
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://warp-desk-89d.notion.site/TEW-822DRE-5289eb95796749c2878843519ab451d8 - | |
| References | () https://www.trendnet.com/support/support-detail.asp?prod=105_TEW-822DRE - |
28 Aug 2024, 20:35
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.8 |
| CWE | CWE-77 |
29 Feb 2024, 01:42
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-02-29 01:42
Updated : 2025-04-01 15:06
NVD link : CVE-2023-51835
Mitre link : CVE-2023-51835
CVE.ORG link : CVE-2023-51835
JSON object : View
Products Affected
trendnet
- tew-822dre
- tew-822dre_firmware
CWE
CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')