CVE-2023-51835

MEDIUM

TRENDnet TEW-822DRE v1.03B02 - OS Command Injection via ipv4_ping Parameter

Title source: llm
STIX 2.1

Description

An issue in TRENDnet TEW-822DRE v.1.03B02 allows a local attacker to execute arbitrary code via the parameters ipv4_ping in the /boafrm/formSystemCheck.

References (2)

Core 2

Scores

CVSS v3 6.8
EPSS 0.0123
EPSS Percentile 79.4%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-77
Status published
Products (1)
trendnet/tew-822dre_firmware 1.03b02
Published Feb 29, 2024
Tracked Since Feb 18, 2026