CVE-2022-37053

CriticalCVSS 9.8

Published: 28/08/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

2.27%

81th percentile - higher than 81% of all known CVEs

Summary

TRENDnet TEW733GR router version 1.03B01 is vulnerable to command injection in the /htdocs/upnpinc/gena.php script. An attacker can remotely execute arbitrary system commands without authentication.

Risk Assessment

The risk involves potential full device takeover by an unauthenticated attacker, leading to local network compromise and traffic interception.

Recommendation

Immediately update the router firmware to the latest available version or replace the device with a supported model. If no update is available, consider disabling UPnP functionality.

Original NVD description (English source)

TRENDnet TEW733GR v1.03B01 is vulnerable to Command injection via /htdocs/upnpinc/gena.php.