critical9.8
CVE-2019-11399
An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices.
Impact
An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices. OS command injection occurs through the get_set.ccp lanHostCfg_HostName_1.1.1.0.0 parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trendnet | Tew-651br Firmware | Version 2.04b1 |
| Trendnet | Tew-652brp Firmware | Version 3.04b01 |
| Trendnet | Tew-652bru Firmware | Version 1.00b12 |