CVE-2026-19841
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
A flaw has been found in TRENDNET TEW-813DRU 1.01b01 in the file /etc/vsftpd.conf of the vsftpd component. This manipulation causes incorrect default permissions. The attack can be carried out remotely but requires high complexity and is considered difficult to exploit. This vulnerability only affects products no longer supported by the maintainer.
Risk Assessment
The risk is the potential remote exploitation of incorrect permissions in the FTP service, which could lead to unauthorized access or file modification. However, due to the difficulty of exploitation and lack of vendor support, the risk is limited.
Recommendation
It is recommended to stop using this device as it is no longer supported by the maintainer. If possible, replace it with a newer model with up-to-date firmware.
Original NVD description (English source)
A flaw has been found in TRENDNET TEW-813DRU 1.01b01. Impacted is an unknown function of the file /etc/vsftpd.conf of the component vsftpd. This manipulation causes incorrect default permissions. The attack is possible to be carried out remotely. A high degree of complexity is needed for the attack. The exploitability is considered difficult. This vulnerability only affects products that are no longer supported by the maintainer.