What’s Vulnerable › Vulnerabilities

CVE-2023-49235

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-01-09 · updated 2026-06-17
• Weakness: CWE-78

Description

An issue was discovered in libremote_dbg.so on TRENDnet TV-IP1314PI 5.5.3 200714 devices. Filtering of debug information is mishandled during use of popen. Consequently, an attacker can bypass validation and execute a shell command.

Affected products

• TRENDnet Tv-Ip1314Pi Firmware: 5.5.3-200714

References

• https://drive.google.com/file/d/1lTloBkH_7zAz1ZbFVSZnfpoPd81aPaHx/view?usp=sharing
• https://github.com/pcsle37/TRENDnet/blob/main/TRENDnet_vul.pdf
• https://drive.google.com/file/d/1lTloBkH_7zAz1ZbFVSZnfpoPd81aPaHx/view?usp=sharing
• https://github.com/pcsle37/TRENDnet/blob/main/TRENDnet_vul.pdf

Get alerted when CVE-2023-49235 or the next vulnerability affects your stack