CVE-2024-0918 is a high severity flaw (CVSS 7.2) in TRENDnet TEW-800MB. The record says the vendor did not respond, and no fixed firmware is listed. This guide covers who is affected, how to check your exposure, and what to do now.
What's affected
TRENDnet TEW-800MB firmware 1.0.1.0, the POST request handler, argument DeviceURL.
The record gives a CVSS base score of 7.2 (High), vector CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. The weakness class is CWE-78.
The record scores this 7.2 High and notes that high privileges are needed to send the request, so the realistic risk is from someone with access to the admin interface or a stolen admin session.
The record says exploit details have been disclosed publicly, so assume that attackers can learn how the weakness works. The record says the vendor did not respond, and no fixed firmware is listed. Check the TRENDnet support page for your model.
How to check if you're exposed
Sign in to the device web interface and read the firmware version on the status page. Compare it with 1.0.1.0. Also check whether the management interface is reachable from untrusted networks.
A free in-browser dependency scan at gold.safeguard.sh/scan can show whether a software package in your own projects matches this CVE, and the Gold directory entry for CVE-2024-0918 keeps the record details in one place. Reachability analysis helps you separate installations where the vulnerable code can actually be hit from those where it sits unused.
For hardware and appliances, no scanner will find them unless they are in an inventory, so start with a list of every device and application of this kind on your network.
What to do now
- Identify every instance of TRENDnet TEW-800MB in your environment, including test and forgotten systems.
- Compare the version you found with the affected range above.
- Look for a fixed release from the vendor or project. The record says the vendor did not respond, and no fixed firmware is listed.
- Apply mitigations while you wait: restrict admin access to a management VLAN, change default credentials, disable remote administration, and plan replacement if no firmware fix arrives.
- Review logs around the affected component for unusual requests.
- Record the decision and a re-check date in your vulnerability tracker.
Why it matters
The weakness is command injection. A value from a web request reaches a shell command on the device without being cleaned, so the device can be made to run commands the owner never intended. On a router or access point that usually means control of the device with high privileges.
Network gear is a weak point for a simple reason: it is rarely patched, often exposed to the local network and sometimes to the internet, and few teams scan it the way they scan servers. A compromised access point is a foothold inside the network it serves.
The record shows this CVE is not in the CISA Known Exploited Vulnerabilities catalog, and none of the pages used for this article report exploitation in the wild.
Quick check
Why does a Medium or High router bug still matter?
Routers and access points control traffic for a whole network, and they are rarely updated or monitored.
Where can I confirm the fixed version?
Check the vendor or project advisory first. The record says the vendor did not respond, and no fixed firmware is listed. This article is based on the NVD record and the pages listed under Sources.
Sources
- https://vuldb.com/?ctiid.252122
- https://vuldb.com/?id.252122
- https://warp-desk-89d.notion.site/TEW-800MB-1f9576ce12234b72b08b9c7f4c7d32a6?pvs=4
- Safeguard Gold record for CVE-2024-0918
Last reviewed: 19 October 2026.
