CVE-2026-15487

TRENDnet TEW-821DAP Firmware Update system_ntp sub_41FBD0 os command injection

View on CVE.org
Published Jul 12, 2026 CVSS 4.0 · 5.3 Medium EPSS 1.8% KEV · Not listed
Description
A vulnerability was found in TRENDnet TEW-821DAP 1.11B03. This impacts the function sub_41FBD0 of the file /goform/system_ntp of the component Firmware Update Handler. Performing a manipulation of the argument Hostname results in os command injection. The attack may be initiated remotely. The vendor explains: "We are unable to confirm the existence of the vulnerabilities for (...) TEW-821DAP (v1.0R) as these items have been EOL. " This vulnerability only affects products that are no longer supported by the maintainer.

Analysis

AI-generated

Technical impact

A remote attacker can exploit a flaw in the Firmware Update Handler of the TRENDnet TEW-821DAP, specifically the sub_41FBD0 function in /goform/system_ntp. By manipulating the Hostname parameter, an attacker can inject arbitrary operating‑system commands, potentially leading to full system compromise, data exfiltration, or persistence. The weakness aligns with CWE-77 and CWE-78, indicating untrusted input is passed to an OS command execution routine.

Affected Systems

The vulnerability affects the TRENDnet TEW-821DAP model running firmware version 1.11B03, a build that has been marked end‑of‑life and is no longer supported by the vendor. No other versions are explicitly listed, but the issue is limited to this firmware release and possibly earlier unsupported builds.

Risk and Exploitability

The CVSS score of 5.3 indicates medium severity. The EPSS score of 1% suggests a low exploitation probability at present; however, it is not zero and could become more attractive over time. The vulnerability is not catalogued in CISA KEV, and there is no known public exploit. Attackers would need to reach the device over the network to send a crafted HTTP request that triggers the vulnerable function, which implies a remote attack vector. Given the lack of an official remediation, the risk is primarily mitigated by stopping use or through manual defensive controls.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Replace the affected device or upgrade to a now‑supported firmware build if available; the vendor has noted the device as end of life and does not supply a patch for this version.
  • If replacement is not immediately feasible, block external access to the /goform/system_ntp endpoint in your network perimeter, effectively preventing remote invocation of the vulnerable function.
  • Apply network segmentation and strict firewall rules to limit local or remote access to the device’s management interface, and monitor logs for anomalous command strings such as "echo" or "cat" that would indicate injection attempts.

Generated by OpenCVE AI on August 1, 2026 at 11:15 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
First Time appeared Trendnet tew-821dap
Vendors & Products Trendnet tew-821dap
Type Values Removed Values Added
Description A vulnerability was found in TRENDnet TEW-821DAP 1.11B03. This impacts the function sub_41FBD0 of the file /goform/system_ntp of the component Firmware Update Handler. Performing a manipulation of the argument Hostname results in os command injection. The attack may be initiated remotely. The vendor explains: "We are unable to confirm the existence of the vulnerabilities for (...) TEW-821DAP (v1.0R) as these items have been EOL. " This vulnerability only affects products that are no longer supported by the maintainer.
Title TRENDnet TEW-821DAP Firmware Update system_ntp sub_41FBD0 os command injection
First Time appeared Trendnet
Trendnet tew-821dap Firmware
Weaknesses CWE-77
CWE-78
CPEs cpe:2.3:o:trendnet:tew-821dap_firmware:*:*:*:*:*:*:*:*
Vendors & Products Trendnet
Trendnet tew-821dap Firmware
References
Metrics cvssV2_0

{'score': 6.5, 'vector': 'AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:ND/RC:UR'}

cvssV3_0

{'score': 6.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R'}

cvssV3_1

{'score': 6.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X'}
Weaknesses
  • CWE-77

    Improper Neutralization of Special Elements used in a Command ('Command Injection')

  • CWE-78

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Sources

Status
PUBLISHED
Assigner
VulDB
Published
Updated
Jul 13, 2026, 3:17 PM
Reserved
Jul 11, 2026, 10:12 AM

View source JSON

Updated
Jul 13, 2026, 3:17 PM

JSON

Status
Deferred
Published
Jul 12, 2026, 9:16 AM
Modified
Oct 25, 2026, 3:10 PM

View source JSON

No data.

Updated
Aug 1, 2026, 11:30 AM

JSON