CVE-2024-28353: TRENDnet Tew-827dru Firmware

High severity, CVSS 8.8. EPSS: 2.1% chance of exploitation in the next 30 days.

There is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware version 2.10B01. An attacker can inject commands into the post request parameters usapps.config.smb_admin_name in the apply.cgi interface, thereby gaining root shell privileges.

Affected products

• TRENDnet Tew-827dru Firmware: version 2.10b01 only

Published 2024-03-15. Last modified 2026-06-17.