Vulnerability · Published Feb 2, 2023 · Assigned by VulDB
CVE-2023-0638TRENDnet TEW-811DRU Web Interface command injection
High 7.2
In plain English
A high-severity command injection in TEW-811DRU from TRENDnet. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.9% (higher than 87% of all known vulnerabilities).
Severity (CVSS 3.1)7.2High
Exploit odds (30 days)2.9%top 12.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A vulnerability has been found in TRENDnet TEW-811DRU 1.0.10.0 and classified as critical. This vulnerability affects unknown code of the component Web Interface. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-220018 is the identifier assigned to this vulnerability.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| TRENDnet | TEW-811DRU | 1.0.10.0 |
Weakness: CWE-77 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
References
- https://vuldb.com/?id.220018 vdb-entry, technical-description, exploit
- https://vuldb.com/?ctiid.220018 signature