This vulnerability in TRENDnet Router 1.1.02b01 involves command injection via the wan_type argument in the /cgi-bin/ping.cgi script. An attacker can remotely manipulate this argument to execute arbitrary commands on the affected device. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and low impact on confidentiality, integrity, and availability. Exploit code is publicly available, increasing the risk of exploitation.

Successful exploitation allows remote attackers to execute arbitrary commands on the affected TRENDnet Router, potentially compromising the device's integrity and availability. The impact is rated medium based on the CVSS score of 5.3. There is no evidence of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to the router's management interface from untrusted networks to reduce exposure.