CVE-2020-14081: OS Command Injection
Published Jun 15, 2020
·Updated
TRENDnet TEW-827DRU devices through 2.06B04 contain multiple command injections in apply.cgi via the action sendlogemail with the key authacname (or authpasswd), allowing an authenticated user to run arbitrary commands on the device.
Affected Software
2 affected components
Trendnet TEW-827DRU firmware<=2.06b04
Trendnet TEW-827DRU
Event History
Jun 15, 2020
CVE Published
via MITRE·03:36 AM
Data Sourced
via MITRE·03:36 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-14081?
CVE-2020-14081 is classified as a high-severity vulnerability due to its command injection capabilities.
2
How do I fix CVE-2020-14081?
To mitigate CVE-2020-14081, update the TRENDnet TEW-827DRU firmware to a version later than 2.06B04.
3
What devices are affected by CVE-2020-14081?
CVE-2020-14081 affects TRENDnet TEW-827DRU devices running firmware version 2.06B04 and earlier.
4
What types of attacks can CVE-2020-14081 facilitate?
CVE-2020-14081 can allow an authenticated user to execute arbitrary commands on the vulnerable device.
5
Who is impacted by CVE-2020-14081?
Any user with authenticated access to the TRENDnet TEW-827DRU can be impacted by CVE-2020-14081.