What’s Vulnerable › Vulnerabilities

CVE-2023-49237

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 18.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-01-09 · updated 2026-06-17
• Weakness: CWE-77

Description

An issue was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices. Command injection can occur because the system function is used by davinci to unpack language packs without strict filtering of URL strings.

Affected products

• TRENDnet Tv-Ip1314Pi Firmware: 5.5.3-200714

References

• https://drive.google.com/file/d/1lTloBkH_7zAz1ZbFVSZnfpoPd81aPaHx/view?usp=sharing
• https://github.com/pcsle37/TRENDnet/blob/main/TRENDnet_vul.pdf
• https://drive.google.com/file/d/1lTloBkH_7zAz1ZbFVSZnfpoPd81aPaHx/view?usp=sharing
• https://github.com/pcsle37/TRENDnet/blob/main/TRENDnet_vul.pdf

Get alerted when CVE-2023-49237 or the next vulnerability affects your stack