This vulnerability involves a command injection flaw in the TRENDnet TEW-823DRU router firmware version 1.1.02b01. The issue arises from improper handling of the Hostname argument in the /cgi-bin/admin.cgi endpoint, enabling remote attackers to inject and execute arbitrary commands on the device. The vulnerability is remotely exploitable without user interaction and requires low privileges. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no user interaction, and low to low integrity, availability, and confidentiality impacts. Public exploit code is available, increasing the risk of exploitation.

Successful exploitation allows remote attackers to execute arbitrary commands on the affected device, potentially compromising device integrity, confidentiality, and availability. This could lead to unauthorized control over the router and disruption of network operations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the device's administrative interface from untrusted networks to reduce exposure.