PT-2026-36603 · Trendnet · Tew-821Dap

Iot_Res · Published 2026-05-02 · Updated 2026-05-02 · CVE-2026-7611

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-821DAP versions prior to 1.12B01

Description An issue exists in the Firmware Update Handler component within the cameo dev.sh file. Specifically, the platform do upgrade cameo dev() function fails to sufficiently verify data authenticity. This allows a remote attacker to perform a manipulation, although the attack complexity is high and exploitability is difficult. This issue only affects products that are no longer supported by the maintainer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

CVE-2026-7611

Affected Products

Tew-821Dap

References · 8

• https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Trendnet/TEW-821DAP_Inte.md · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-7611 · Security Note
• https://vuldb.com/vuln/360568/cti · Note
• https://twitter.com/CVEnew/status/2050523098793857513 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2050540584163529055 · Twitter Post
• https://vuldb.com/submit/806218 · Note
• https://vuldb.com/vuln/360568 · Note
• https://twitter.com/infoflowcloud/status/2050524538803220708 · Twitter Post