CVE-2024-28353: Command Injection
There is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware version 2.10B01. An attacker can inject commands into the post request parameters usapps.config.smbadminname in the apply.cgi interface, thereby gaining root shell privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-28353?
CVE-2024-28353 is classified as a high severity vulnerability due to the potential for remote command execution.
How do I fix CVE-2024-28353?
To fix CVE-2024-28353, update the TRENDnet TEW-827DRU router firmware to the latest version provided by TRENDnet.
What type of vulnerability is CVE-2024-28353?
CVE-2024-28353 is a command injection vulnerability affecting the TRENDnet TEW-827DRU router.
What are the potential impacts of CVE-2024-28353?
Exploitation of CVE-2024-28353 allows attackers to execute arbitrary commands on the router, potentially gaining root access.
Which firmware versions are affected by CVE-2024-28353?
CVE-2024-28353 affects the TRENDnet TEW-827DRU router with firmware version 2.10B01.