Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-28353

There is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware version 2.10B01. An attacker can inject commands into the post request parameters usapps.config.smb_admin_name in the apply.cgi interface, thereby gaining root shell privileges.

Published

2024-03-15T08:15:06.393

Last Modified

2025-04-01T16:15:01.273

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-77
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System trendnet tew-827dru_firmware 2.10b01 Yes
Hardware trendnet tew-827dru - No
References