Threats tagged 'ghsa-qx7x-73f2-8q44'

A command injection vulnerability exists in the firmware update component of TRENDnet TEW-821DAP devices up to version 1.12B01. The flaw is located in the tools_diagnostic function of the /tmp/diagnostic file. Remote attackers can exploit this vulnerability to execute arbitrary OS commands. The affected hardware version is v1.xR, which has been end-of-life for 8 years and is no longer sold or supported by the vendor.