TI-2023-00606 Aliases CVE-2023-0640 GHSA-gw27-2xcc-9p84

TRENDnet TEW-652BRP Web Interface ping.ccp command injection

HIGH 76CWE-77Published 2023-02-02 · Updated 2025-03-26

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-77.

Summary

A vulnerability was found in TRENDnet TEW-652BRP 3.04b01. It has been classified as critical. Affected is an unknown function of the file ping.ccp of the component Web Interface. The manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-220020.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.06542 93rd percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
TRENDnet	TEW-652BRP	3.04b01	—	No fix listed	CNA

TEW-652BRP VendorTRENDnet Affected 3.04b01 Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:o:trendnet:tew-652brp_firmware:3.04b01:::::::*	3.04b01	Vulnerable	TRENDnet
cpe:2.3:h:trendnet:tew-652brp:-:::::::*	not specified by NVD	Running on	TRENDnet

cpe:2.3:o:trendnet:tew-652brp_firmware:3.04b01:*:*:*:*:*:*:* Versions 3.04b01 Vulnerable ·TRENDnet
cpe:2.3:h:trendnet:tew-652brp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TRENDnet

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2023-0640
2026-10-03 Alias added: GHSA-gw27-2xcc-9p84

References

—

TI-2019-08516 An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU… CVSS 3.1CRITICAL 9.8
TI-2024-34278 TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a… CVSS 3.1MEDIUM 4.8
TI-2024-34277 TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a… CVSS 3.1MEDIUM 4.8
TI-2024-34276 TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a… CVSS 3.1MEDIUM 4.8
TI-2024-34275 TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a… CVSS 3.1MEDIUM 4.8
TI-2019-08515 An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU… CVSS 3.1CRITICAL 9.8

See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences