A high-severity command injection vulnerability in Trendnet TEW-635BRM allows authenticated attackers to compromise the underlying operating system.

This vulnerability is a command injection flaw (CWE-77) triggered by improper input validation. It requires an attacker to have low-level user privileges to interact with the vulnerable function, enabling the execution of arbitrary system commands on the device.

With a CVSS score of 8.8, this vulnerability poses a significant risk to network integrity. Successful exploitation could allow an attacker to gain full administrative control over the router, potentially leading to unauthorized network traffic interception, permanent denial of service, or lateral movement into the internal network.

Immediate Action: Contact the vendor for firmware update availability, as no specific patch version is currently documented. If no update is available, restrict management interface access to trusted administrative IP addresses only.

Proactive Monitoring: Review device system logs for unusual shell-like activity or unauthorized configuration changes. Monitor outbound traffic from the router for signs of command-and-control communication.

Compensating Controls: Implement strict network segmentation and ensure the administrative interface is not exposed to the public internet or untrusted internal segments.

Public Exploit Available: Yes — a public proof-of-concept exists on GitHub.

Given the high CVSS severity and the availability of a public proof-of-concept, users should treat this vulnerability with urgency. Disable remote management features immediately and monitor the vendor’s support portal for official firmware releases to remediate this command injection flaw.