medium6.4
CVE-2024-22546
TRENDnet TEW-815DAP 1.0.2.0 is vulnerable to Command Injection via the do_setNTP function.
Impact
TRENDnet TEW-815DAP 1.0.2.0 is vulnerable to Command Injection via the do_setNTP function. An authenticated attacker with administrator privileges can leverage this vulnerability over the network via a malicious POST request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trendnet | Tew-815dap Firmware | Version 1.0.2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://warp-desk-89d.notion.site/TEW-815DAP-94a631c20dee4f399268dbcc880f1f4c
- https://www.trendnet.com/support/support-detail.asp?prod=105_TEW-815DAP
- https://warp-desk-89d.notion.site/TEW-815DAP-94a631c20dee4f399268dbcc880f1f4c
- https://www.trendnet.com/support/support-detail.asp?prod=105_TEW-815DAP