This vulnerability involves OS command injection in the tools_diagnostic function of TRENDnet TEW-821DAP firmware up to version 1.12B01, affecting hardware version v1.xR. The injection flaw allows an attacker with limited privileges to execute arbitrary commands on the device's operating system. The product affected has been EOL for 8 years, and the vendor no longer supports or sells it. No official remediation or patch is available from the vendor. The CVSS 4.0 vector indicates the attack requires adjacent network access, low attack complexity, and no user interaction, with partial impacts on confidentiality, integrity, and availability. Although the exploit is public, no active exploitation has been documented.

Successful exploitation could allow an attacker with limited privileges and adjacent network access to execute arbitrary OS commands on the affected device, potentially compromising confidentiality, integrity, and availability to a limited extent. However, the impact is mitigated by the fact that the affected hardware is EOL and no longer supported or sold by the vendor. No known active exploitation in the wild has been reported.

No official patch or remediation is available as the affected product is end-of-life and unsupported. Users should discontinue use of the affected hardware version v1.xR and replace it with a supported device. Since no vendor fix exists, mitigation relies on network-level controls such as isolating or removing the vulnerable device from critical environments.