Critical severity · published Dec 18, 2019
CVE-2019-11399
An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices
9.8
CVSS
3%
EPSS
No
On KEV
Description
An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices. OS command injection occurs through the get_set.ccp lanHostCfg_HostName_1.1.1.0.0 parameter.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.0% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TF
Tew-651br Firmware · Trendnet
2.04b1 · source: NVD
TF
Tew-652brp Firmware · Trendnet
3.04b01 · source: NVD
TF
Tew-652bru Firmware · Trendnet
1.00b12 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-11399
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-11399
Third Party Advisory
https://github.com/pr0v3rbs/CVE/blob/master/CVE-2019-11399/ticket.png
Vendor Advisory
https://www.trendnet.com/support/
More from Tew-651br Firmware
9.8
CVE-2015-1187
D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability
9.8
CVE-2019-11400
An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices
4.8
CVE-2024-51190
TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS) vulnerability via the ptRule_ApplicationName_1.1.6.0.0…
4.8
CVE-2024-51189
TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS) vulnerability via the macList_Name_1.1.1.0.0 parameter on…
4.8
CVE-2024-51188
TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS) vulnerability via the vsRule_VirtualServerName_1.1.10.0.0…