First published: Thu Feb 02 2023(Updated: )
A vulnerability was found in TRENDnet TEW-652BRP 3.04b01. It has been classified as critical. Affected is an unknown function of the file ping.ccp of the component Web Interface. The manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-220020.
Credit: cna@vuldb.com cna@vuldb.com
Affected Software | Affected Version | How to fix |
---|---|---|
Trendnet Tew-652brp Firmware | =3.04b01 | |
TRENDnet TEW-652BRP | ||
All of | ||
Trendnet Tew-652brp Firmware | =3.04b01 | |
TRENDnet TEW-652BRP |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2023-0640 is critical.
You can exploit CVE-2023-0640 by injecting commands into the ping.ccp file of the web interface.
Yes, CVE-2023-0640 can be exploited remotely.
To mitigate CVE-2023-0640, it is recommended to update to the latest firmware version provided by TRENDnet.
The Common Weakness Enumeration (CWE) ID associated with CVE-2023-0640 is CWE-77.