Description
A vulnerability has been found in TRENDnet TEW-822DRE 1.00B21/1.01B06. This affects the function sub_43ACF4 of the file /boafrm/formWsc. Such manipulation of the argument peerPin leads to command injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
trendnet: tew-822dre firmware; trendnet: tew-822dre
References4
- pentagonal-time-3a7.notion.site/TRENDnet-TEW-822DRE-Command-Inj… ExploitThird Party Advisory
- vuldb.com/?ctiid.338517 Permissions RequiredVDB Entry
- vuldb.com/?id.338517 Third Party AdvisoryVDB Entry
- vuldb.com/?submit.715131 Third Party AdvisoryVDB Entry
Metrics
- CVSS 3.1
-
8.8
HIGH
Score source: NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 4.0
-
2.1
LOW
Score source: CNA
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - EPSS — exploit probability
- 13% percentile: 96 · as of 11 November 2026
- CWE
- CWE-74CWE-77
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.