CVE-2018-19239: OS Command Injection
TRENDnet TEW-673GRU v1.00b40 devices have an OS command injection vulnerability in the startarpping function of the timer binary, which allows remote attackers to execute arbitrary commands via three parameters (dhcpdstart, dhcpdend, and lanipaddr) passed to the apply.cgi binary through a POST request.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-19239?
CVE-2018-19239 is an OS command injection vulnerability found in TRENDnet TEW-673GRU v1.00b40 devices.
How severe is CVE-2018-19239?
CVE-2018-19239 has a severity level of 7.2, which is classified as critical.
How does CVE-2018-19239 affect TRENDnet TEW-673GRU devices?
CVE-2018-19239 allows remote attackers to execute arbitrary commands on TRENDnet TEW-673GRU v1.00b40 devices.
What is the CWE classification of CVE-2018-19239?
CVE-2018-19239 has CWE classifications of CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')) and CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).
Are TRENDnet TEW-673GRU v1.00b40 devices vulnerable to CVE-2018-19239?
Yes, TRENDnet TEW-673GRU v1.00b40 devices are vulnerable to CVE-2018-19239.