TRENDnet TEW-755AP Command Injection Vulnerability

TRENDnet TEW-755AP is a router from TRENDnet, Inc. A command injection vulnerability exists in TRENDnet TEW-755AP, which stems from the failure to properly filter the sys_service parameter in the setup_wizard_mydlink (sub_4104B8) function. construct command special characters, commands, etc. An attacker could use this vulnerability to execute arbitrary commands on the system.