CVE-2024-0918

Summary

CVE-2024-0918 is a newly disclosed critical vulnerability affecting the TRENDnet TEW-800MB 1.0.1.0 with an unknown functionality of the POST Request Handler. The issue involves os command injection triggered by manipulating the argument DeviceURL. This vulnerability can be exploited remotely, and the exploit code has been made public. Despite early contact, the vendor has not responded to disclosure efforts, increasing the risk for potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.