CVE-2013-3098

🗓️ 04 Feb 2014 16:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 49 Views🌐 WEB

Multiple CSRF vulnerabilities in TRENDnet TEW-812DRU router firmware before 1.0.9.0 allow hijacking of admin authentication for various actions. NOTE: Some details obtained from third-party sources

Reporter	Title	Published	Views	Family All 9
0day.today	TRENDnet TEW-812DRU CSRF/Command Injection Root Exploit	29 Jul 201300:00	–	zdt
Cvelist	CVE-2013-3098	4 Feb 201416:00	–	cvelist
Exploit DB	TRENDnet TEW-812DRU - Cross-Site Request Forgery/Command Injection Root	28 Jul 201300:00	–	exploitdb
EUVD	EUVD-2013-3036	7 Oct 202500:30	–	euvd
exploitpack	TRENDnet TEW-812DRU - Cross-Site Request ForgeryCommand Injection Root	28 Jul 201300:00	–	exploitpack
NVD	CVE-2013-3098	4 Feb 201421:55	–	nvd
Prion	Cross site request forgery (csrf)	4 Feb 201421:55	–	prion
Prion	Design/Logic Flaw	4 Feb 201421:55	–	prion
seebug.org	TRENDnet TEW-812DRU CSRF/Command Injection Root Exploit	1 Jul 201400:00	–	seebug

NVD

Node

trendnet tew-812dru_firmwareMatch1.0.8.0

AND

trendnet tew-812druMatch-

Source	Link
securityevaluators	www.securityevaluators.com/content/case-studies/routers/Vulnerability_Catalog.pdf
osvdb	www.osvdb.org/95803
secunia	www.secunia.com/advisories/54310
securityevaluators	www.securityevaluators.com/knowledge/case_studies/routers/trendnet_tew-812dru.php
infosec42	www.infosec42.blogspot.com/2013/07/exploit-trendnet-tew-812dru-csrfcommand.html

Parameter	Position	Path	Description	CWE
page	request body	uapply.cgi	CSRF vulnerability enables applying port forwarding settings via a POST to uapply.cgi	CWE-352
forward_port_enable	request body	uapply.cgi	CSRF vulnerability enables applying port forwarding settings via a POST to uapply.cgi	CWE-352
forward_port	request body	uapply.cgi	CSRF vulnerability enables applying port forwarding settings via a POST to uapply.cgi	CWE-352
forward_port_proto0	request body	uapply.cgi	CSRF vulnerability enables applying port forwarding settings via a POST to uapply.cgi	CWE-352
forward_port_from_start0	request body	uapply.cgi	CSRF vulnerability enables applying port forwarding settings via a POST to uapply.cgi	CWE-352
forward_port_from_end0	request body	uapply.cgi	CSRF vulnerability enables applying port forwarding settings via a POST to uapply.cgi	CWE-352
forward_port_to_ip0	request body	uapply.cgi	CSRF vulnerability enables applying port forwarding settings via a POST to uapply.cgi	CWE-352
forward_port_to_start0	request body	uapply.cgi	CSRF vulnerability enables applying port forwarding settings via a POST to uapply.cgi	CWE-352
forward_port_to_end0	request body	uapply.cgi	CSRF vulnerability enables applying port forwarding settings via a POST to uapply.cgi	CWE-352
schedule0	request body	uapply.cgi	CSRF vulnerability enables applying port forwarding settings via a POST to uapply.cgi	CWE-352

29 Apr 2026 01:13Current

7.7High risk

Vulners AI Score7.7

CVSS 26.8

EPSS0.00347

CWE-352