Weak Password Management in TRENDnet TEW-831DR WiFi Router
CVE-2022-30328

6.5MEDIUM

Key Information:

Vendor

Trendnet

Status
Tew-831dr Firmware
Vendor
CVE Published:
16 June 2022

What is CVE-2022-30328?

A security flaw in TRENDnet TEW-831DR devices allows unauthorized users to change the username and password for the web interface. This vulnerability arises because the setup process for the web interface does not verify the existing password, enabling potential malicious access. Users should take immediate action to secure their devices to prevent unauthorized modifications.

References

https://research.nccgroup.com/?research=Technical+advisories
x_refsource_MISC
https://research.nccgroup.com/2022/06/10/technical-adviso...
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2022-30328 : Weak Password Management in TRENDnet TEW-831DR WiFi Router