TRENDnet TEW-657BRM Authenticated Remote OS Command Injection Vulnerability

An authenticated remote OS command injection vulnerability has been identified in the TRENDnet TEW-657BRM router, specifically in the setup.cgi binary. This vulnerability allows attackers to execute arbitrary commands with root privileges by exploiting certain HTTP parameters. The issue affects firmware version 1.00.1.

Impact

Exploitation of this vulnerability allows for authenticated remote OS command injection, with executed commands running with root privileges.

Reproduction

To reproduce this vulnerability, send an HTTP POST request to the router's setup.cgi endpoint. Include the 'command' parameter with the desired shell command, and set the 'todo' parameter to 'system_command' and the 'next_file' parameter to 'system_command.htm'. The request must be authenticated.