Deviceways

Router

TRENDnet TEW-823DRU

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
v1.0R
Get OpenWrt firmware Release listed · 25.12.6Open hardware record Release listed · 25.12.5
V1.xR
Open hardware record
Original project github.com

v1.0R

First installation
GUI OEM
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

trendnet tew-823dru — device documentation (github.com)Device details — Source documentation (openwrt.org)

Hardware revision
v1.0R

Device details

TRENDnet TEW-823DRU V1.xR — TechInfoDepot (github.com)TRENDnet TEW-823DRU V1.xR — WikiDevi (github.com)

Hardware revision
V1.xR

OpenWrt · v1.0R

OpenWrt · v1.0R — Source documentation (openwrt.org)

Installation routes recorded
GUI OEM
Availability recorded by source
Discontinued 2016

Hardware differences

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

CVSS 9.4 (v4.0)

TEW-823DRU

TRENDnet TEW-823DRU NVRAM wan.cgi strcpy stack-based overflow

CVE-2026-75976

Affected firmware
1.1.02b01
Fix
Fix details in the linked record
Read VulDB CVE record
Details and sources
CVE updated

A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the function strcpy of the file /cgi-bin/wan.cgi of the component NVRAM. This manipulation of the argument wan_l2tp_password causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.

VDB-391892 | TRENDnet TEW-823DRU NVRAM wan.cgi strcpy stack-based overflow — TEW-823DRU (vuldb.com) ↗VDB-391892 | CTI Indicators (IOB, IOC, IOA) — TEW-823DRU (vuldb.com) ↗CVE-2026-75976 | CVE Analysis and Report — TEW-823DRU (vuldb.com) ↗Submit #877796 | TRENDnet TEW-823DRU TEW-823DRU Stack-based Buffer Overflow — TEW-823DRU (vuldb.com) ↗
CVE published

CVSS 5.3 (v4.0)

TEW-823DRU

TRENDnet TEW-823DRU admin.cgi command injection

CVE-2026-75984

Affected firmware
1.1.02b01
Fix
Fix details in the linked record
Read VulDB CVE record
Details and sources
CVE updated

A vulnerability was detected in TRENDnet TEW-823DRU 1.1.02b01. Impacted is an unknown function of the file /cgi-bin/admin.cgi. The manipulation of the argument Hostname results in command injection. The attack can be launched remotely. The exploit is now public and may be used.

VDB-391903 | TRENDnet TEW-823DRU admin.cgi command injection — TEW-823DRU (vuldb.com) ↗VDB-391903 | CTI Indicators (IOB, IOC, TTP, IOA) — TEW-823DRU (vuldb.com) ↗CVE-2026-75984 | CVE Analysis and Report — TEW-823DRU (vuldb.com) ↗Submit #877798 | TRENDnet TEW-823DRU TEW-823DRU Command Injection — TEW-823DRU (vuldb.com) ↗
CVE published

CVSS 5.1 (v4.0)

TEW-823DRU

TRENDnet TEW-823DRU CLI Configuration Tool nvram_get command injection

CVE-2026-77988

Affected firmware
1.1.02b01
Fix
Fix details in the linked record
Read VulDB CVE record
Details and sources
CVE updated

A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvram_get of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.

VDB-394178 | TRENDnet TEW-823DRU CLI Configuration Tool nvram_get command injection — TEW-823DRU (vuldb.com) ↗VDB-394178 | CTI Indicators (IOB, IOC, TTP, IOA) — TEW-823DRU (vuldb.com) ↗CVE-2026-77988 | CVE Analysis and Report — TEW-823DRU (vuldb.com) ↗Submit #881256 | TRENDnet TEW-823DRU Wireless AC2100 Dual Band Gigabit Router v1.1.02b01 Command Injection — TEW-823DRU (vuldb.com) ↗
CVE published

TRENDnet TEW-823DRU

TRENDnet TEW-823DRU devices with firmware before 1.00b36 have a hardcoded password of kcodeskcodes for the root account, which makes it easier for remote attackers to obtain access via…

CVE-2014-8579

Affected firmware
Version details in source scope
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
Public disclosure CVE updated

TRENDnet TEW-823DRU devices with firmware before 1.00b36 have a hardcoded password of kcodeskcodes for the root account, which makes it easier for remote attackers to obtain access via an FTP session.

Check more security advisories for this device · CVE.org