PT-2014-2661 · Trendnet · Tew-812Dru

Published 2014-02-04 · Updated 2014-02-05 · CVE-2013-3098

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-812DRU router versions prior to 1.0.9.0

Description The issue allows remote attackers to hijack the authentication of administrators for various requests, including changing admin credentials via a request to setSysAdm.cgi, enabling remote management or port forwarding in an Apply action to uapply.cgi, and having unspecified impact via a request to setNTP.cgi.

Recommendations For versions prior to 1.0.9.0, update the firmware to version 1.0.9.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the setSysAdm.cgi, uapply.cgi, and setNTP.cgi endpoints until the firmware is updated.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2013-3098

Affected Products

Tew-812Dru

References · 7

• 🔥 http://securityevaluators.com/knowledge/case_studies/routers/trendnet_tew-812dru.php · Exploit
• 🔥 http://securityevaluators.com/content/case-studies/routers/Vulnerability_Catalog.pdf · Exploit
• 🔥 http://infosec42.blogspot.com/2013/07/exploit-trendnet-tew-812dru-csrfcommand.html · Exploit
• 🔥 https://exploit-db.com/exploits/27177 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-3098 · Security Note
• http://secunia.com/advisories/54310 · Vendor Advisory
• http://osvdb.org/95803 · Note