CVE-2023-51833 is a command injection in the TRENDnet TEW-411BRPplus router, firmware 2.07_eu. The data1 parameter of the debug.cgi page allows code execution. The record rates it High at 8.1. No fixed firmware is named, so check TRENDnet's support page.
What's affected
TRENDnet TEW-411BRPplus firmware 2.07_eu. The record does not list a fixed version. It references the product's TRENDnet support page, which is where to look for firmware updates.
There is a wording mismatch in the record. The description says a local attacker, while the vector says attack over the network with high complexity. We report both. If the management interface is reachable from anywhere you do not control, assume the network reading applies.
The record gives a CVSS score of 8.1 (High). The CVSS vector reads as follows. The attack can be reached over the network, and the complexity is high. No account is needed. No user interaction is required. Impact on confidentiality is high, on integrity high, and on availability high. The weakness class is CWE-77.
How to check if you're exposed
Open the router's web interface and read the firmware version. If it shows 2.07_eu, you are on the named build.
Then check whether the management interface is reachable from untrusted networks. A debug page should never be reachable from outside.
What to do now
- Identify TEW-411BRPplus routers and their firmware.
- Check the TRENDnet support page for newer firmware and install it.
- Restrict access to the management interface, and make sure it is not exposed to the internet.
- Change default and weak administrator passwords.
- Consider replacing the device if no fix is available, since it is an older wireless router.
Why it matters
Command injection, CWE-77, means a parameter value ends up inside a shell command. The record names the data1 parameter of debug.cgi. A debug page is a forgotten corner of firmware, and it often runs with the highest privileges.
The score is High and not Critical because of the high attack complexity in the vector. The record's text says local attacker, which would narrow exposure, but the vector says network. Without a vendor advisory we cannot settle the difference.
Old consumer routers get few updates. If yours has reached the end of support, replacing it removes the risk.
One practical note: an older wireless router that has reached end of life is a candidate for retirement, not just patching. Weigh the cost of a replacement against the effort of defending a device that its maker may no longer update, and record the decision either way.
Quick check
Is there a fixed version?
The record does not name one. Check TRENDnet's support page for the product.
Is it local or remote?
The description says local while the vector says network. Both are in the record.
Sources
Last reviewed: 19 October 2026.
