Command injection

2024-01-2522:15:00

PRIOn knowledge base

www.prio-n.com

command injection

trendnet tew-411brpplus

debug.cgi

arbitrary code execution

8.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.9%

JSON

A command injection issue in TRENDnet TEW-411BRPplus v.2.07_eu that allows a local attacker to execute arbitrary code via the data1 parameter in the debug.cgi page.

CPENameOperatorVersion
tew-411brpplus_firmwareeq2.7.0-eu

CPE	Name	Operator	Version
	tew-411brpplus_firmware	eq	2.7.0-eu

References

warp-desk-89d.notion.site/TEW-411BRPplus-9bafe26e48964be3be12eab47f77203d

www.trendnet.com/support/support-detail.asp?prod=160_TEW-411BRPplus