Browse CVEs

CRITICAL 9.8 CVE-2022-46598 TRENDnet TEW755AP 1.13B01 was discovered to contain a command injection vulnerability via the wps_sta_enrollee_pin parameter in the action set_sta_en… Tew 755ap Firmware No fix yet Fix from $2,3002022-12-30 CRITICAL 9.8 CVE-2022-46599 TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the setlogo_num parameter in the icp_setlogo_img (sub_41DBF4) function. Tew 755ap Firmware No fix yet Fix from $2,3002022-12-30 CRITICAL 9.8 CVE-2022-46600 TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wps_sta_enrollee_pin parameter in the action set_sta_enrollee_pin_24g fu… Tew 755ap Firmware No fix yet Fix from $2,3002022-12-30 CRITICAL 9.8 CVE-2022-46601 TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the setbg_num parameter in the icp_setbg_img (sub_41DD68) function. Tew 755ap Firmware No fix yet Fix from $2,3002022-12-30 HIGH 8.8 CVE-2022-44373 A stack overflow vulnerability exists in TrendNet Wireless AC Easy-Upgrader TEW-820AP (Version v1.0R, firmware version 1.01.B01) which may result in … Tew 820ap Firmware No fix yet Fix from $1,9502022-12-07 CRITICAL 9.8 CVE-2022-37053 TRENDnet TEW733GR v1.03B01 is vulnerable to Command injection via /htdocs/upnpinc/gena.php. Tew733gr Firmware Mitigation only Fix from $2,3002022-08-28 CRITICAL 9.8 CVE-2022-38556 Trendnet TEW733GR v1.03B01 contains a Static Default Credential vulnerability in /etc/init0.d/S80telnetd.sh. Tew733gr Firmware No fix yet Fix from $2,3002022-08-28 HIGH 7.2 CVE-2022-35203 An access control issue in TrendNet TV-IP572PI v1.0 allows unauthenticated attackers to access sensitive system information. Tv Ip572pi Firmware Mitigation only Fix from $1,9502022-08-23 MEDIUM 6.1 CVE-2022-31873 Trendnet IP-110wn camera fw_tv-ip110wn_v2(1.2.2.68) has an XSS vulnerability via the prefix parameter in /admin/general.cgi. Tv Ip110wn Firmware No fix yet Fix from $1,6002022-06-17 MEDIUM 6.1 CVE-2022-31875 Trendnet IP-110wn camera fw_tv-ip110wn_v2(1.2.2.68) has an xss vulnerability via the proname parameter in /admin/scheprofile.cgi Tv Ip110wn Firmware No fix yet Fix from $1,6002022-06-17 CRITICAL 9.8 CVE-2022-30329 An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. An OS injection vulnerability exists within the web interface, allowing an attac… Tew 831dr Firmware Mitigation only Fix from $2,3002022-06-16 HIGH 8.8 CVE-2022-30325 An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The default pre-shared key for the Wi-Fi networks is the same for every router e… Tew 831dr Firmware Mitigation only Fix from $1,9502022-06-16 MEDIUM 6.5 CVE-2022-30327 An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The web interface is vulnerable to CSRF. An attacker can change the pre-shared k… Tew 831dr Firmware No fix yet Fix from $1,6002022-06-16 MEDIUM 6.5 CVE-2022-30328 An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The username and password setup for the web interface does not require entering … Tew 831dr Firmware Mitigation only Fix from $1,6002022-06-16 MEDIUM 5.4 CVE-2022-30326 An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The network pre-shared key field on the web interface is vulnerable to XSS. An a… Tew 831dr Firmware Mitigation only Fix from $1,6002022-06-16 HIGH 8.8 CVE-2021-20159 Trendnet AC2600 TEW-827DRU version 2.08B01 is vulnerable to command injection. The system log functionality of the firmware allows for command inject… Tew 827dru Firmware No fix yet Fix from $1,9502021-12-30 HIGH 8.8 CVE-2021-20160 Trendnet AC2600 TEW-827DRU version 2.08B01 contains a command injection vulnerability in the smb functionality of the device. The username parameter … Tew 827dru Firmware No fix yet Fix from $1,9502021-12-30 HIGH 8.8 CVE-2021-20165 Trendnet AC2600 TEW-827DRU version 2.08B01 does not properly implement csrf protections. Most pages lack proper usage of CSRF protections or mitigati… Tew 827dru Firmware No fix yet Fix from $1,9502021-12-30 MEDIUM 6.8 CVE-2021-20161 Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient protections for the UART functionality. A malicious actor with physical access to… Tew 827dru Firmware Mitigation only Fix from $1,6002021-12-30 CRITICAL 10.0 CVE-2021-20151 Trendnet AC2600 TEW-827DRU version 2.08B01 contains a flaw in the session management for the device. The router's management software manages web ses… Tew 827dru Firmware Mitigation only Fix from $2,3002021-12-30 CRITICAL 9.8 CVE-2021-20149 Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient access controls for the WAN interface. The default iptables ruleset for governing… Tew 827dru Firmware Mitigation only Fix from $2,3002021-12-30 CRITICAL 9.8 CVE-2021-20155 Trendnet AC2600 TEW-827DRU version 2.08B01 makes use of hardcoded credentials. It is possible to backup and restore device configurations via the man… Tew 827dru Firmware No fix yet Fix from $2,3002021-12-30 CRITICAL 9.8 CVE-2021-20158EPSS 11% Trendnet AC2600 TEW-827DRU version 2.08B01 contains an authentication bypass vulnerability. It is possible for an unauthenticated, malicous actor to … Tew 827dru Firmware Mitigation only Fix from $2,3002021-12-30 HIGH 7.5 CVE-2021-20154 Trendnet AC2600 TEW-827DRU version 2.08B01 contains an security flaw in the web interface. HTTPS is not enabled on the device by default. This result… Tew 827dru Firmware Mitigation only Fix from $1,9502021-12-30 HIGH 7.5 CVE-2021-20157 It is possible for an unauthenticated, malicious user to force the device to reboot due to a hidden administrative command. Tew 827dru Firmware No fix yet Fix from $1,9502021-12-30 MEDIUM 6.8 CVE-2021-20153 Trendnet AC2600 TEW-827DRU version 2.08B01 contains a symlink vulnerability in the bittorrent functionality. If enabled, the bittorrent functionality… Tew 827dru Firmware Mitigation only Fix from $1,6002021-12-30 MEDIUM 6.5 CVE-2021-20152 Trendnet AC2600 TEW-827DRU version 2.08B01 lacks proper authentication to the bittorrent functionality. If enabled, anyone is able to visit and modif… Tew 827dru Firmware Mitigation only Fix from $1,6002021-12-30 MEDIUM 6.5 CVE-2021-20156 Trendnet AC2600 TEW-827DRU version 2.08B01 contains an improper access control configuration that could allow for a malicious firmware update. It is … Tew 827dru Firmware Mitigation only Fix from $1,6002021-12-30 MEDIUM 5.3 CVE-2021-20150EPSS 40% Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses information via redirection from the setup wizard. Authentication can be bypassed and… Tew 827dru Firmware Mitigation only Fix from $1,6002021-12-30 HIGH 7.5 CVE-2021-28845 Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, w… Tew 755ap Firmware Mitigation only Fix from $1,9502021-08-10