TRENDnet TEW-751DR/TEW-752DRU/TEW733GR Web Management Backend pigwidgeon.cgi fwrite os command injection
A vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW733GR 1.03B01/1.03B03. Affected is the function fwrite of the file pigwidgeon.cgi of the component Web Management Backend. The manipulation of the argument service results in os command injection. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor confirms: "As this router was EOL'd in 2011, we have no way of testing if such vulnerability exists. We will notify our customers of a potential vulnerability on this product." This vulnerability only affects products that are no longer supported by the maintainer.
CVE-2026-108804
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-108804
TEW-751DR
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
TEW-752DRU
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
TEW733GR
Source reference: /containers/cna/affected/2/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"cpes": [
"cpe:2.3:a:trendnet:tew-751dr:*:*:*:*:*:*:*:*"
],
"vendor": "TRENDnet",
"modules": [
"Web Management Backend"
],
"product": "TEW-751DR",
"versions": [
{
"status": "affected",
"version": "1.03B01"
},
{
"status": "affected",
"version": "1.03B03"
}
]
},
{
"cpes": [
"cpe:2.3:a:trendnet:tew-752dru:*:*:*:*:*:*:*:*"
],
"vendor": "TRENDnet",
"modules": [
"Web Management Backend"
],
"product": "TEW-752DRU",
"versions": [
{
"status": "affected",
"version": "1.03B01"
},
{
"status": "affected",
"version": "1.03B03"
}
]
},
{
"cpes": [
"cpe:2.3:a:trendnet:tew733gr:*:*:*:*:*:*:*:*"
],
"vendor": "TRENDnet",
"modules": [
"Web Management Backend"
],
"product": "TEW733GR",
"versions": [
{
"status": "affected",
"version": "1.03B01"
},
{
"status": "affected",
"version": "1.03B03"
}
]
}
]- Related CVEs
- CVE-2026-108804
Source reference:
/cveMetadata/cveId
Publisher severity
critical
Source reference: /containers/cna/metrics
- Event
- #28904 · Revision 1
- Added to Heist Feed
- Publisher date