CVE-2026-15487: falha de média gravidade em TRENDnet TEW-821DAP
TRENDnet TEW-821DAP Firmware Update system_ntp sub_41FBD0 os command injection
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 1.8%
A vulnerability was found in TRENDnet TEW-821DAP 1.11B03. This impacts the function sub_41FBD0 of the file /goform/system_ntp of the component Firmware Update Handler. Performing a manipulation of the argument Hostname results in os command injection. The attack may be initiated remotely. The vendor explains: "We are unable to confirm the existence of the vulnerabilities for (...) TEW-821DAP (v1.0R) as these items have been EOL. " This vulnerability only affects products that are no longer supported by the maintainer.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X
Produtos afetados
TRENDnet · TEW-821DAPCVEs relacionadas — TRENDnet TEW-821DAP
No mesmo produto, das mais perigosas para as menos.
CVE-2026-7608MEDIUMTRENDnet TEW-821DAP tools_diagnostic os command injectionEPSS 5.7%CVE-2026-7609MEDIUMTRENDnet TEW-821DAP Firmware Udpate diagnostic tools_diagnostic os command injectionEPSS 4.5%CVE-2026-77945MEDIUMTRENDnet TEW-821DAP ssi upload.cgi command injectionEPSS 1.8%CVE-2026-76582MEDIUMTRENDnet TEW-821DAP ssi ping.cgi system command injectionEPSS 1.8%CVE-2026-15486MEDIUMTRENDnet TEW-821DAP Firmware Update tools_ddns sub_42026C os command injectionEPSS 1.8%CVE-2026-15485MEDIUMTRENDnet TEW-821DAP DNS Lookup tools_nslookup sub_43F2C4 os command injectionEPSS 1.8%