CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
72.7%
An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices. OS command injection occurs through the get_set.ccp lanHostCfg_HostName_1.1.1.0.0 parameter.
Vendor | Product | Version | CPE |
---|---|---|---|
trendnet | tew-651br | - | cpe:2.3:h:trendnet:tew-651br:-:*:*:*:*:*:*:* |
trendnet | tew-651br_firmware | 2.04b1 | cpe:2.3:o:trendnet:tew-651br_firmware:2.04b1:*:*:*:*:*:*:* |
trendnet | tew-652brp | - | cpe:2.3:h:trendnet:tew-652brp:-:*:*:*:*:*:*:* |
trendnet | tew-652brp_firmware | 3.04b01 | cpe:2.3:o:trendnet:tew-652brp_firmware:3.04b01:*:*:*:*:*:*:* |
trendnet | tew-652bru | - | cpe:2.3:h:trendnet:tew-652bru:-:*:*:*:*:*:*:* |
trendnet | tew-652bru_firmware | 1.00b12 | cpe:2.3:o:trendnet:tew-652bru_firmware:1.00b12:*:*:*:*:*:*:* |
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
72.7%