trendnet tew-812dru Security Vulnerabilities

2 Vulnerabilities

Description
Undocumented TELNET service in TRENDnet TEW-812DRU when a web page named backdoor contains an HTML parameter of password and a value of j78G?DFdg_24Mhw3. Impacted versions: - Base Score: 0.0, Severity: NA, ID: CVE-2013-3366, Last Modified: 2019-11-14T12:30:00Z References Advisory Modemly Security Checklist TRENDnet-TEW-812DRU-router-setup
TRENDnet TEW-812DRU router allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) wan network prefix to internet/ipv6.asp; (2) remote port to adm/management.asp; (3) pptp username, (4) pptp password, (5) ip, (6) gateway, (7) l2tp username, or (8) l2tp password to internet/wan.asp; (9) NtpDstStart, (10) NtpDstEnd, or (11) NtpDstOffset to adm/time.asp; or (12) device url to adm/management.asp. NOTE: vectors 9, 10, and 11 can be exploited by unauthenticated remote attackers by leveraging CVE-2013-3098. Impacted versions: - Base Score: 8.5, Severity: HIGH, ID: CVE-2013-3365, Last Modified: 2014-02-05T14:26:00Z References Exploit Exploit Modemly Security Checklist TRENDnet-TEW-812DRU-router-setup

Description

Undocumented TELNET service in TRENDnet TEW-812DRU when a web page named backdoor contains an HTML parameter of password and a value of j78G?DFdg_24Mhw3.

Impacted versions: -

Base Score: 0.0, Severity: NA, ID: CVE-2013-3366, Last Modified: 2019-11-14T12:30:00Z

References

Advisory

Modemly Security Checklist

TRENDnet-TEW-812DRU-router-setup

TRENDnet TEW-812DRU router allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) wan network prefix to internet/ipv6.asp; (2) remote port to adm/management.asp; (3) pptp username, (4) pptp password, (5) ip, (6) gateway, (7) l2tp username, or (8) l2tp password to internet/wan.asp; (9) NtpDstStart, (10) NtpDstEnd, or (11) NtpDstOffset to adm/time.asp; or (12) device url to adm/management.asp. NOTE: vectors 9, 10, and 11 can be exploited by unauthenticated remote attackers by leveraging CVE-2013-3098.

Impacted versions: -

Base Score: 8.5, Severity: HIGH, ID: CVE-2013-3365, Last Modified: 2014-02-05T14:26:00Z

References

Exploit Exploit

Modemly Security Checklist

TRENDnet-TEW-812DRU-router-setup

USAGE: Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.