A command injection vulnerability in the TRENDnet TEW-821DAP, version 2.2.01b05, allows authenticated attackers to compromise the integrity and availability of the device.

This is a command injection vulnerability (CWE-77) occurring within the ssi interface. The CVSS vector indicates that the attacker must have low-level privileges to interact with the vulnerable component and execute arbitrary system commands.

An attacker successfully exploiting this vulnerability could gain administrative control over the access point, leading to potential network traffic interception or unauthorized network configuration changes. With a CVSS score of 7.4, the risk to the confidentiality, integrity, and availability of network communications is substantial.

Immediate Action: Seek and apply firmware updates from the official TRENDnet support portal to remediate the command injection flaw.

Proactive Monitoring: Monitor device traffic and administrative logs for suspicious commands or unauthorized access attempts targeting the device management interface.

Compensating Controls: Disable remote management of the access point and restrict administrative access to a physically secured management network or a specific, trusted management host.

Public Exploit Available: Yes (GitHub PoC)

Given the availability of a public proof-of-concept, the risk of exploitation is elevated. Organizations currently using the TRENDnet TEW-821DAP should proactively monitor for unauthorized access and apply the vendor patch immediately upon its release to prevent potential system compromise.