TRENDnet TEW-751DR/TEW-752DRU/TEW733GR: OS command injection in web management
Summary
Several end-of-life TRENDnet wireless routers contain an OS command injection flaw in the fwrite function of the web management backend (pigwidgeon.cgi), reached through the service argument. A remote attacker can run operating system commands on the device without authentication or user interaction, which may give full control of the router and access to the network behind it. A public exploit is reported, and the vendor has stated it will not test or fix the product.
Affected
- TRENDnet TEW-751DR, firmware 1.03B01 and 1.03B03
- TRENDnet TEW-752DRU, firmware 1.03B01 and 1.03B03
- TRENDnet TEW733GR, firmware 1.03B01 and 1.03B03
- Only devices with a reachable web management interface are exposed to remote attacks.
Fixed in
Unknown. No patched firmware or TRENDnet security advisory has been found. The vendor states the products are end-of-life and that it cannot test for the flaw.
Workaround
- Remove the web management interface from internet-facing paths and restrict it to a trusted management VLAN or wired LAN address.
- Disable remote administration and check for port-forwarding rules or UPnP that expose the device.
- Replace the device with a supported model, as this is the only reliable remediation.
Exploitation
- A public exploit is referenced in the CVE data (GitHub repository dacj4n/TRENDNetExploits); its contents could not be verified.
- CISA SSVC: exploitation status PoC, automatable: yes, technical impact: total.
- Not listed in the CISA KEV catalogue (per secondary sources).
- No reports of exploitation in the wild found.
Our recommendation
- Identify all TRENDnet devices with these models and firmware versions.
- Verify whether the web management interface or port forwarding exposes them to the internet, and close that exposure immediately.
- If a device was reachable from the internet, treat it as potentially compromised: check logs and configuration and reset or replace it.
- Plan replacement with a supported router and check the network for other unsupported TRENDnet devices.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- VulDB entry vuldb.com
- VulDB submission (exploit reference) vuldb.com
- GitHub repository referenced by CVE github.com
- CNA data mirrored on Vulners vulners.com
- TRENDnet product page TEW-751DR www.trendnet.com
- TRENDnet support www.trendnet.com
- CVE Brief cvebrief.com
- The Hacker Wire www.thehackerwire.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 31 Oct 2026, 02:32.
Original description (NVD)
A vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW733GR 1.03B01/1.03B03. Affected is the function fwrite of the file pigwidgeon.cgi of the component Web Management Backend. The manipulation of the argument service results in os command injection. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor confirms: "As this router was EOL'd in 2011, we have no way of testing if such vulnerability exists. We will notify our customers of a potential vulnerability on this product." This vulnerability only affects products that are no longer supported by the maintainer.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.