CVE-2023-0611

HIGH EXPLOITED

TRENDnet TEW-652BRP 3.04B01 - Command Injection in Web Management Interface

Title source: llm

Exploitation Summary

CVE-2023-0611 has been observed exploited in the wild (reported by VulnCheck KEV).

Description

A vulnerability, which was classified as critical, has been found in TRENDnet TEW-652BRP 3.04B01. This issue affects some unknown processing of the file get_set.ccp of the component Web Management Interface. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-219935.

References (2)

Core 2

Core References

Exploit, Third Party Advisory vdb-entry technical-description exploit

https://vuldb.com/?id.219935

Permissions Required, Third Party Advisory signature

https://vuldb.com/?ctiid.219935

Scores

CVSS v3 8.8

EPSS 0.0286

EPSS Percentile 86.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

VulnCheck KEV 2024-10-12

CWE

CWE-77

Status published

Products (1)

trendnet/tew-652brp_firmware 3.04b01

Published Feb 01, 2023

Tracked Since Feb 18, 2026