CVE-2018-19239

TRENDnet TEW-673GRU v1.00b40 devices have an OS command injection vulnerability in the start_arpping function of the timer binary, which allows remote attackers to execute arbitrary commands via three parameters (dhcpd_start, dhcpd_end, and lan_ipaddr) passed to the apply.cgi binary through a POST request.

• CWE-78

• http://packetstormsecurity.com/files/150693/TRENDnet-Command-Injection-Buffer-Overflow-Cross-Site-Scripting.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2018/Dec/21Mailing List, Third Party Advisory
• http://packetstormsecurity.com/files/150693/TRENDnet-Command-Injection-Buffer-Overflow-Cross-Site-Scripting.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2018/Dec/21Mailing List, Third Party Advisory

Published

Dec 20, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-19228An issue was discovered in LAOBANCMS 2.0. It allows arbitrar…
• CVE-2018-19229An issue was discovered in LAOBANCMS 2.0. It allows XSS via …
• CVE-2018-1923IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Se…8.4
• CVE-2018-19232The web service on Epson WorkForce WF-2861 10.48 LQ22I3(Reco…
• CVE-2018-19233COMPAREX Miss Marple Enterprise Edition before 2.0 allows lo…
• CVE-2018-19234The Miss Marple Updater Service in COMPAREX Miss Marple Ente…
• CVE-2018-19240Buffer overflow in network.cgi on TRENDnet TV-IP110WN V1.2.2…
• CVE-2018-19241Buffer overflow in video.cgi on TRENDnet TV-IP110WN V1.2.2 b…
• CVE-2018-19242Buffer overflow in apply.cgi on TRENDnet TEW-632BRP 1.010B32…
• CVE-2018-19244An XML External Entity (XXE) vulnerability exists in the Cha…
• CVE-2018-19246PHP-Proxy 5.1.0 allows remote attackers to read local files …
• CVE-2018-19248The web service on Epson WorkForce WF-2861 10.48 LQ22I3(Reco…