There is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware version 2.10B01. An attacker can inject commands into the post request parameters usapps.config.smb_admin_name in the apply.cgi interface, thereby gaining root shell privileges.
References
| Link | Resource |
|---|---|
| https://warp-desk-89d.notion.site/TEW-827DRU-5c40fb20572148f0b00f329d69273791 | Exploit Third Party Advisory |
| https://warp-desk-89d.notion.site/TEW-827DRU-5c40fb20572148f0b00f329d69273791 | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
01 Apr 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://warp-desk-89d.notion.site/TEW-827DRU-5c40fb20572148f0b00f329d69273791 - Exploit, Third Party Advisory | |
| First Time |
Trendnet
Trendnet tew-827dru Firmware Trendnet tew-827dru |
|
| CPE | cpe:2.3:h:trendnet:tew-827dru:-:*:*:*:*:*:*:* cpe:2.3:o:trendnet:tew-827dru_firmware:2.10b01:*:*:*:*:*:*:* |
21 Nov 2024, 09:06
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://warp-desk-89d.notion.site/TEW-827DRU-5c40fb20572148f0b00f329d69273791 - |
27 Aug 2024, 20:35
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| CWE | CWE-77 |
15 Mar 2024, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-15 08:15
Updated : 2025-04-01 16:15
NVD link : CVE-2024-28353
Mitre link : CVE-2024-28353
CVE.ORG link : CVE-2024-28353
JSON object : View
Products Affected
trendnet
- tew-827dru
- tew-827dru_firmware
CWE
CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')