This vulnerability involves a command injection flaw in TRENDnet Router 1.1.02b01. Specifically, the issue is triggered by manipulating the wan_type argument in the /cgi-bin/ping.cgi CGI script, allowing remote attackers to execute arbitrary commands on the device. The vulnerability is remotely exploitable without user interaction and requires low attack complexity and privileges. Although exploit code is publicly available, there is no indication of active exploitation in the wild. No official fix or mitigation has been disclosed by TRENDnet as of the publication date.

Successful exploitation of this vulnerability could allow remote attackers to execute arbitrary commands on the affected router, potentially leading to unauthorized control or disruption of the device. Given the medium CVSS score, the impact is significant but not critical. The lack of privileges required and remote attack vector increases the risk, but the absence of known active exploitation reduces immediate threat urgency.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the router's management interface from untrusted networks and monitor for unusual activity. No vendor-provided mitigation or temporary fix is currently available.