PT-2024-13704 · Trendnet · Trendnet Tv-Ip1314Pi

Published 2024-01-09 · Updated 2025-06-20 · CVE-2023-49235

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TRENDnet TV-IP1314PI version 5.5.3 200714

Description An issue was discovered in libremote dbg.so where filtering of debug information is mishandled during use of popen. Consequently, an attacker can bypass validation and execute a shell command.

Recommendations For TRENDnet TV-IP1314PI version 5.5.3 200714, consider disabling the use of popen in libremote dbg.so until a patch is available. Restrict access to debug information to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2023-49235

Affected Products

Trendnet Tv-Ip1314Pi

References · 8

• 🔥 https://github.com/pcsle37/TRENDnet/blob/main/TRENDnet_vul.pdf · Exploit
• 🔥 https://drive.google.com/file/d/1lTloBkH_7zAz1ZbFVSZnfpoPd81aPaHx/view?usp=sharing · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-49235 · Security Note
• https://osv.dev/vulnerability/CVE-2023-49235 · Vendor Advisory
• https://t.me/cvenotify/67302 · Telegram Post
• https://twitter.com/CVEnew/status/1744643259735871726 · Twitter Post
• https://t.me/cvenotify/126267 · Telegram Post
• https://t.me/cvenotify/66723 · Telegram Post