CVE-2020-14075: OS Command Injection
TRENDnet TEW-827DRU devices through 2.06B04 contain multiple command injections in apply.cgi via the action pppoeconnect, rupppoeconnect, or dhcpconnect with the key wanifname (or wan0dns), allowing an authenticated user to run arbitrary commands on the device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-14075?
CVE-2020-14075 is classified as a medium severity vulnerability due to its potential for exploitation through command injection.
How do I fix CVE-2020-14075?
To fix CVE-2020-14075, upgrade your TRENDnet TEW-827DRU firmware to a version above 2.06B04.
What devices are affected by CVE-2020-14075?
CVE-2020-14075 affects TRENDnet TEW-827DRU devices running firmware version 2.06B04 or earlier.
What types of attacks can CVE-2020-14075 facilitate?
CVE-2020-14075 can facilitate command injection attacks, allowing authenticated users to execute arbitrary commands on affected devices.
Is CVE-2020-14075 exploitable without authentication?
No, CVE-2020-14075 requires an authenticated user to exploit the command injection vulnerabilities.