CVE-2026-7611: TRENDnet TEW-821DAP Firmware Update cameo_dev.sh platform_do_upgrade_cameo_dev data authenticity
A vulnerability was found in TRENDnet TEW-821DAP up to 1.12B01. This impacts the function platformdoupgradecameodev of the file cameodev.sh of the component Firmware Update Handler. Performing a manipulation results in insufficient verification of data authenticity. The attack is possible to be carried out remotely. The complexity of an attack is rather high. The exploitability is said to be difficult. The vendor explains: "That firmware version will only work on our hardware version v1.xR. We have already EOL that product 8 years ago and are no longer selling". This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7611?
CVE-2026-7611 is categorized with a moderate severity level due to potential risks associated with unauthorized firmware updates.
How do I fix CVE-2026-7611?
To fix CVE-2026-7611, update the TRENDnet TEW-821DAP firmware to a version newer than 1.12B01.
What component is affected by CVE-2026-7611?
CVE-2026-7611 affects the Firmware Update Handler function platform_do_upgrade_cameo_dev in the cameo_dev.sh script.
What version of TRENDnet TEW-821DAP is affected by CVE-2026-7611?
CVE-2026-7611 affects all versions of TRENDnet TEW-821DAP firmware up to and including 1.12B01.
Is CVE-2026-7611 exploitable remotely?
Yes, CVE-2026-7611 can be exploited remotely, allowing attackers to perform unauthorized firmware updates.