CVE-2026-15481: Command Injection in Trendnet TEW-635BRM
A security flaw has been discovered in Trendnet TEW-635BRM up to 1.00.03. This vulnerability affects the function ipoa_test of the file /sbin/rc of the component IPoA WAN Connection Setup. Performing a manipulation of the argument ipoa_ipaddr results in command injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor explains: "We are unable to confirm if the vulnerability exists. This item has been EOL since 2011. We will make an official announcement of possible vulnerabilities, and recommend users to switch devices." This vulnerability only affects products that are no longer supported by the maintainer.
AI Analysis
Technical Summary
CVE-2026-15481 describes a command injection vulnerability in the Trendnet TEW-635BRM router, specifically affecting version 1.00.03. The flaw exists in the ipoa_test function within the /sbin/rc file, part of the IPoA WAN Connection Setup component. By manipulating the ipoa_ipaddr argument, an attacker can inject and execute arbitrary commands remotely. The vendor has not confirmed the vulnerability and notes that the product has been end-of-life since 2011, advising users to replace the device rather than expecting a fix.
Potential Impact
Successful exploitation of this vulnerability allows remote attackers to execute arbitrary commands on the affected device with limited privileges, potentially leading to high impact on confidentiality, integrity, and availability of the device and network. Given the device is no longer supported, the risk is elevated due to lack of official remediation.
Mitigation Recommendations
No official patch or fix is available as the product is end-of-life and unsupported. The vendor recommends discontinuing use of the affected device and switching to a supported model. Users should replace the Trendnet TEW-635BRM device to mitigate this vulnerability.
CVE-2026-15481: Command Injection in Trendnet TEW-635BRM
Description
A security flaw has been discovered in Trendnet TEW-635BRM up to 1.00.03. This vulnerability affects the function ipoa_test of the file /sbin/rc of the component IPoA WAN Connection Setup. Performing a manipulation of the argument ipoa_ipaddr results in command injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor explains: "We are unable to confirm if the vulnerability exists. This item has been EOL since 2011. We will make an official announcement of possible vulnerabilities, and recommend users to switch devices." This vulnerability only affects products that are no longer supported by the maintainer.
CVSS v4.0
Score 8.7high
Affected software
pkg:github/trendnet/tew-635brmcpe:2.3:a:trendnet:tew-635brm:*:*:*:*:*:*:*:*Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-15481 describes a command injection vulnerability in the Trendnet TEW-635BRM router, specifically affecting version 1.00.03. The flaw exists in the ipoa_test function within the /sbin/rc file, part of the IPoA WAN Connection Setup component. By manipulating the ipoa_ipaddr argument, an attacker can inject and execute arbitrary commands remotely. The vendor has not confirmed the vulnerability and notes that the product has been end-of-life since 2011, advising users to replace the device rather than expecting a fix.
Potential Impact
Successful exploitation of this vulnerability allows remote attackers to execute arbitrary commands on the affected device with limited privileges, potentially leading to high impact on confidentiality, integrity, and availability of the device and network. Given the device is no longer supported, the risk is elevated due to lack of official remediation.
Mitigation Recommendations
No official patch or fix is available as the product is end-of-life and unsupported. The vendor recommends discontinuing use of the affected device and switching to a supported model. Users should replace the Trendnet TEW-635BRM device to mitigate this vulnerability.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-07-11T10:02:32.426Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a532ac668715ace43366538
Added to database: 07/12/2026, 05:48:54 UTC
Last enriched: 07/19/2026, 19:19:30 UTC
Last updated: 08/26/2026, 01:24:24 UTC
Views: 107
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.