High severity7.2NVD Advisory· Published Dec 20, 2018· Updated Jun 17, 2026
CVE-2018-19239
CVE-2018-19239
Description
TRENDnet TEW-673GRU v1.00b40 devices have an OS command injection vulnerability in the start_arpping function of the timer binary, which allows remote attackers to execute arbitrary commands via three parameters (dhcpd_start, dhcpd_end, and lan_ipaddr) passed to the apply.cgi binary through a POST request.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:o:trendnet:tew-673gru_firmware:1.00b40:*:*:*:*:*:*:*
- Range: 1.00b40
Patches
Vulnerability mechanics
References
2- packetstormsecurity.com/files/150693/TRENDnet-Command-Injection-Buffer-Overflow-Cross-Site-Scripting.htmlnvdThird Party AdvisoryVDB Entry
- seclists.org/fulldisclosure/2018/Dec/21nvdMailing ListThird Party Advisory
News mentions
0No linked articles in our index yet.