Tew 652brp Firmware

tew-652brp_firmware

Vendor: Trendnet • 10 CVEs

CVEs (10)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-51190 1Trendnet 3Tew 651br Firmware Tew 652brp FirmwareTew 652bru Firmware Apr 1, 2025 Nov 11, 2024 N/A· v4 4.8 MEDIUM· v3 N/A· v2 TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS) vulnerability via the ptRule_ApplicationName_1.1.6.0.0 parameter on the /special_ap.htm page.
CVE-2024-51189 1Trendnet 3Tew 651br Firmware Tew 652brp FirmwareTew 652bru Firmware Apr 1, 2025 Nov 11, 2024 N/A· v4 4.8 MEDIUM· v3 N/A· v2 TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS) vulnerability via the macList_Name_1.1.1.0.0 parameter on the /filters.htm page.
CVE-2024-51188 1Trendnet 3Tew 651br Firmware Tew 652brp FirmwareTew 652bru Firmware Apr 1, 2025 Nov 11, 2024 N/A· v4 4.8 MEDIUM· v3 N/A· v2 TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS) vulnerability via the vsRule_VirtualServerName_1.1.10.0.0 parameter on the /virtual_server.htm page...Show more TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS) vulnerability via the vsRule_VirtualServerName_1.1.10.0.0 parameter on the /virtual_server.htm page.Show less
CVE-2024-51187 1Trendnet 3Tew 651br Firmware Tew 652brp FirmwareTew 652bru Firmware Apr 1, 2025 Nov 11, 2024 N/A· v4 4.8 MEDIUM· v3 N/A· v2 TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS) vulnerability via the firewallRule_Name_1.1.1.0.0 parameter on the /firewall_setting.htm page.
CVE-2023-0640 1Trendnet 1Tew 652brp Firmware Nov 21, 2024 Feb 2, 2023 N/A· v4 9.8 CRITICAL· v3 8.3 HIGH· v2 A vulnerability was found in TRENDnet TEW-652BRP 3.04b01. It has been classified as critical. Affected is an unknown function of the file ping.ccp of the component Web Interface. The manipulation leads to command injecti...Show more A vulnerability was found in TRENDnet TEW-652BRP 3.04b01. It has been classified as critical. Affected is an unknown function of the file ping.ccp of the component Web Interface. The manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-220020.Show less
CVE-2023-0639 1Trendnet 1Tew 652brp Firmware Nov 21, 2024 Feb 2, 2023 N/A· v4 6.1 MEDIUM· v3 3.3 LOW· v2 A vulnerability was found in TRENDnet TEW-652BRP 3.04b01 and classified as problematic. This issue affects some unknown processing of the file get_set.ccp of the component Web Management Interface. The manipulation of th...Show more A vulnerability was found in TRENDnet TEW-652BRP 3.04b01 and classified as problematic. This issue affects some unknown processing of the file get_set.ccp of the component Web Management Interface. The manipulation of the argument nextPage leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-220019.Show less
CVE-2023-0618 1Trendnet 1Tew 652brp Firmware Nov 21, 2024 Feb 1, 2023 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 A vulnerability was found in TRENDnet TEW-652BRP 3.04B01. It has been declared as critical. This vulnerability affects unknown code of the file cfg_op.ccp of the component Web Service. The manipulation leads to memory co...Show more A vulnerability was found in TRENDnet TEW-652BRP 3.04B01. It has been declared as critical. This vulnerability affects unknown code of the file cfg_op.ccp of the component Web Service. The manipulation leads to memory corruption. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-219958 is the identifier assigned to this vulnerability.Show less
CVE-2023-0611 1Trendnet 1Tew 652brp Firmware Nov 21, 2024 Feb 1, 2023 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 A vulnerability, which was classified as critical, has been found in TRENDnet TEW-652BRP 3.04B01. This issue affects some unknown processing of the file get_set.ccp of the component Web Management Interface. The manipula...Show more A vulnerability, which was classified as critical, has been found in TRENDnet TEW-652BRP 3.04B01. This issue affects some unknown processing of the file get_set.ccp of the component Web Management Interface. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-219935.Show less
CVE-2019-11400 1Trendnet 3Tew 651br Firmware Tew 652brp FirmwareTew 652bru Firmware Nov 21, 2024 Dec 18, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices. A buffer overflow occurs through the get_set.ccp ccp_act parameter.
CVE-2019-11399 1Trendnet 3Tew 651br Firmware Tew 652brp FirmwareTew 652bru Firmware Nov 21, 2024 Dec 18, 2019 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices. OS command injection occurs through the get_set.ccp lanHostCfg_HostName_1.1.1.0.0 parameter.