This vulnerability affects TRENDnet TEW-821DAP devices running firmware up to version 1.12B01. The issue is an OS command injection in the tools_diagnostic function of the Firmware Update component, specifically involving the /tmp/diagnostic file. Remote exploitation is possible without user interaction and with low attack complexity. The vendor has discontinued support for this hardware version (v1.xR) and no longer sells it. No official patch or remediation is available from the vendor.

Successful exploitation allows remote attackers to execute arbitrary operating system commands on the affected device, potentially leading to unauthorized control or disruption. The CVSS 4.0 base score is 5.3 (medium severity), reflecting network attack vector, low attack complexity, and no required privileges or user interaction. Since the product is end-of-life and unsupported, affected devices remain vulnerable if still in use.

No official fix or patch is available as the product is end-of-life and no longer supported by TRENDnet. Users should discontinue use of the affected hardware or isolate it from untrusted networks to mitigate risk. Replacement with supported devices is recommended. Monitor for any vendor updates but currently no remediation is provided.