PT-2019-13231 · Trendnet · Tew-827Dru

Published 2019-07-09 · Updated 2020-08-24 · CVE-2019-13277

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-827DRU versions up to and including 2.04B03

Description The issue allows an unauthenticated attacker to execute setup wizard functionality, potentially leading to a denial of service. This can be done on the local intranet or remotely if remote administration is enabled.

Recommendations For versions up to and including 2.04B03, consider disabling remote administration to minimize the risk of exploitation. As a temporary workaround, restrict access to the setup wizard functionality until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2019-13277

Affected Products

Tew-827Dru

References · 3

• 🔥 https://github.com/fuzzywalls/TRENDNetExploits/tree/master/CVE-2019-13277 · Exploit
• https://osv.dev/vulnerability/CVE-2019-13277 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-13277 · Security Note