Trendnet TEW-657BRM vulnerabilities

A vulnerability has been found in Trendnet TEW-657BRM 1.00.1. The function vpn_drop in the file /setup.cgi is affected by OS command injection via manipulation of the argument policy_name. The attack can be launched remotely and the exploit has been disclosed. The vendor confirmed the product is end-of-life since 2011 and no patch will be released.

A flaw has been found in Trendnet TEW-657BRM 1.00.1. The function vpn_connect in the file /setup.cgi is affected by OS command injection via manipulation of the argument policy_name. The attack can be launched remotely and the exploit has been published. The vendor confirmed the product is end-of-life since 2011 and no patch will be released.

A vulnerability was detected in Trendnet TEW-657BRM 1.00.1. The function ping_test in the file /setup.cgi is affected by OS command injection via manipulation of the argument c4_IPAddr. The attack can be launched remotely and the exploit is now public. The vendor confirmed the product is end-of-life since 2011 and no patch will be released.

A weakness has been identified in Trendnet TEW-657BRM 1.00.1. The function add_wps_client in the file /setup.cgi is affected by OS command injection via manipulation of the argument wl_enrolee_pin. The attack can be launched remotely and the exploit has been made public. The vendor confirmed the product is end-of-life since 2011 and no patch will be released.

An OS command injection vulnerability was found in Trendnet TEW-657BRM router version 1.00.1 in the Edit function of the /setup.cgi file. Manipulating the pcdb_list argument allows remote command execution. The vendor confirmed the product is discontinued and unsupported since 2011.

A vulnerability in the discontinued Trendnet TEW-657BRM router (version 1.00.1) allows remote stack-based buffer overflow via the mac_pc_dba argument in /setup.cgi. The vendor confirmed the product is end-of-life and no longer supported.

A stack-based buffer overflow vulnerability was identified in Trendnet TEW-657BRM version 1.00.1 in the add_apcdb function of /setup.cgi via the mac_pc_dba argument. The attack can be performed remotely and the exploit is publicly available. The vendor confirmed the product is end-of-life since 2011 and no longer supported.