Vulnerability index

Browse CVEs

146 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Tew 755ap Firmware CRITICAL 9.8
CVE-2022-46598

TRENDnet TEW755AP 1.13B01 was discovered to contain a command injection vulnerability via the wps_sta_enrollee_pin parameter in the action set_sta_en…

No fix yet
Fix from $2,300 2022-12-30
Tew 755ap Firmware CRITICAL 9.8
CVE-2022-46599

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the setlogo_num parameter in the icp_setlogo_img (sub_41DBF4) function.

No fix yet
Fix from $2,300 2022-12-30
Tew 755ap Firmware CRITICAL 9.8
CVE-2022-46600

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wps_sta_enrollee_pin parameter in the action set_sta_enrollee_pin_24g fu…

No fix yet
Fix from $2,300 2022-12-30
Tew 755ap Firmware CRITICAL 9.8
CVE-2022-46601

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the setbg_num parameter in the icp_setbg_img (sub_41DD68) function.

No fix yet
Fix from $2,300 2022-12-30
Tew 820ap Firmware HIGH 8.8
CVE-2022-44373

A stack overflow vulnerability exists in TrendNet Wireless AC Easy-Upgrader TEW-820AP (Version v1.0R, firmware version 1.01.B01) which may result in …

No fix yet
Fix from $1,950 2022-12-07
Tew733gr Firmware CRITICAL 9.8
CVE-2022-37053

TRENDnet TEW733GR v1.03B01 is vulnerable to Command injection via /htdocs/upnpinc/gena.php.

Mitigation only
Fix from $2,300 2022-08-28
Tew733gr Firmware CRITICAL 9.8
CVE-2022-38556

Trendnet TEW733GR v1.03B01 contains a Static Default Credential vulnerability in /etc/init0.d/S80telnetd.sh.

No fix yet
Fix from $2,300 2022-08-28
Tv Ip572pi Firmware HIGH 7.2
CVE-2022-35203

An access control issue in TrendNet TV-IP572PI v1.0 allows unauthenticated attackers to access sensitive system information.

Mitigation only
Fix from $1,950 2022-08-23
Tv Ip110wn Firmware MEDIUM 6.1
CVE-2022-31873

Trendnet IP-110wn camera fw_tv-ip110wn_v2(1.2.2.68) has an XSS vulnerability via the prefix parameter in /admin/general.cgi.

No fix yet
Fix from $1,600 2022-06-17
Tv Ip110wn Firmware MEDIUM 6.1
CVE-2022-31875

Trendnet IP-110wn camera fw_tv-ip110wn_v2(1.2.2.68) has an xss vulnerability via the proname parameter in /admin/scheprofile.cgi

No fix yet
Fix from $1,600 2022-06-17
Tew 831dr Firmware CRITICAL 9.8
CVE-2022-30329

An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. An OS injection vulnerability exists within the web interface, allowing an attac…

Mitigation only
Fix from $2,300 2022-06-16
Tew 831dr Firmware HIGH 8.8
CVE-2022-30325

An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The default pre-shared key for the Wi-Fi networks is the same for every router e…

Mitigation only
Fix from $1,950 2022-06-16
Tew 831dr Firmware MEDIUM 6.5
CVE-2022-30327

An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The web interface is vulnerable to CSRF. An attacker can change the pre-shared k…

No fix yet
Fix from $1,600 2022-06-16
Tew 831dr Firmware MEDIUM 6.5
CVE-2022-30328

An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The username and password setup for the web interface does not require entering …

Mitigation only
Fix from $1,600 2022-06-16
Tew 831dr Firmware MEDIUM 5.4
CVE-2022-30326

An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The network pre-shared key field on the web interface is vulnerable to XSS. An a…

Mitigation only
Fix from $1,600 2022-06-16
Tew 827dru Firmware HIGH 8.8
CVE-2021-20159

Trendnet AC2600 TEW-827DRU version 2.08B01 is vulnerable to command injection. The system log functionality of the firmware allows for command inject…

No fix yet
Fix from $1,950 2021-12-30
Tew 827dru Firmware HIGH 8.8
CVE-2021-20160

Trendnet AC2600 TEW-827DRU version 2.08B01 contains a command injection vulnerability in the smb functionality of the device. The username parameter …

No fix yet
Fix from $1,950 2021-12-30
Tew 827dru Firmware HIGH 8.8
CVE-2021-20165

Trendnet AC2600 TEW-827DRU version 2.08B01 does not properly implement csrf protections. Most pages lack proper usage of CSRF protections or mitigati…

No fix yet
Fix from $1,950 2021-12-30
Tew 827dru Firmware MEDIUM 6.8
CVE-2021-20161

Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient protections for the UART functionality. A malicious actor with physical access to…

Mitigation only
Fix from $1,600 2021-12-30
Tew 827dru Firmware CRITICAL 10.0
CVE-2021-20151

Trendnet AC2600 TEW-827DRU version 2.08B01 contains a flaw in the session management for the device. The router's management software manages web ses…

Mitigation only
Fix from $2,300 2021-12-30
Tew 827dru Firmware CRITICAL 9.8
CVE-2021-20149

Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient access controls for the WAN interface. The default iptables ruleset for governing…

Mitigation only
Fix from $2,300 2021-12-30
Tew 827dru Firmware CRITICAL 9.8
CVE-2021-20155

Trendnet AC2600 TEW-827DRU version 2.08B01 makes use of hardcoded credentials. It is possible to backup and restore device configurations via the man…

No fix yet
Fix from $2,300 2021-12-30
Tew 827dru Firmware CRITICAL 9.8
CVE-2021-20158EPSS 11%

Trendnet AC2600 TEW-827DRU version 2.08B01 contains an authentication bypass vulnerability. It is possible for an unauthenticated, malicous actor to …

Mitigation only
Fix from $2,300 2021-12-30
Tew 827dru Firmware HIGH 7.5
CVE-2021-20154

Trendnet AC2600 TEW-827DRU version 2.08B01 contains an security flaw in the web interface. HTTPS is not enabled on the device by default. This result…

Mitigation only
Fix from $1,950 2021-12-30
Tew 827dru Firmware HIGH 7.5
CVE-2021-20157

It is possible for an unauthenticated, malicious user to force the device to reboot due to a hidden administrative command.

No fix yet
Fix from $1,950 2021-12-30
Tew 827dru Firmware MEDIUM 6.8
CVE-2021-20153

Trendnet AC2600 TEW-827DRU version 2.08B01 contains a symlink vulnerability in the bittorrent functionality. If enabled, the bittorrent functionality…

Mitigation only
Fix from $1,600 2021-12-30
Tew 827dru Firmware MEDIUM 6.5
CVE-2021-20152

Trendnet AC2600 TEW-827DRU version 2.08B01 lacks proper authentication to the bittorrent functionality. If enabled, anyone is able to visit and modif…

Mitigation only
Fix from $1,600 2021-12-30
Tew 827dru Firmware MEDIUM 6.5
CVE-2021-20156

Trendnet AC2600 TEW-827DRU version 2.08B01 contains an improper access control configuration that could allow for a malicious firmware update. It is …

Mitigation only
Fix from $1,600 2021-12-30
Tew 827dru Firmware MEDIUM 5.3
CVE-2021-20150EPSS 40%

Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses information via redirection from the setup wizard. Authentication can be bypassed and…

Mitigation only
Fix from $1,600 2021-12-30
Tew 755ap Firmware HIGH 7.5
CVE-2021-28845

Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, w…

Mitigation only
Fix from $1,950 2021-08-10