Trendnet

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-46583 1Trendnet 1Tew 755ap Firmware Jun 17, 2026 Dec 30, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the reboot_type parameter in the wizard_ipv6 (sub_41C380) function.
CVE-2022-46582 1Trendnet 1Tew 755ap Firmware Jun 17, 2026 Dec 30, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the login_name parameter in the do_graph_auth (sub_4061E0) function.
CVE-2022-46581 1Trendnet 1Tew 755ap Firmware Jun 17, 2026 Dec 30, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.nslookup_target parameter in the tools_nslookup function.
CVE-2022-46580 1Trendnet 1Tew 755ap Firmware Jun 17, 2026 Dec 30, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the user_edit_page parameter in the wifi_captive_portal function.
CVE-2022-44373 1Trendnet 1Tew 820ap Firmware Jun 17, 2026 Dec 7, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 A stack overflow vulnerability exists in TrendNet Wireless AC Easy-Upgrader TEW-820AP (Version v1.0R, firmware version 1.01.B01) which may result in remote code execution.
CVE-2022-38556 1Trendnet 1Tew733gr Firmware Jun 17, 2026 Aug 28, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Trendnet TEW733GR v1.03B01 contains a Static Default Credential vulnerability in /etc/init0.d/S80telnetd.sh.
CVE-2022-37053 1Trendnet 1Tew733gr Firmware Jul 9, 2026 Aug 28, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 TRENDnet TEW733GR v1.03B01 is vulnerable to Command injection via /htdocs/upnpinc/gena.php.
CVE-2022-35203 1Trendnet 1Tv Ip572pi Firmware Jul 9, 2026 Aug 23, 2022 N/A· v4 7.2 HIGH· v3 N/A· v2 An access control issue in TrendNet TV-IP572PI v1.0 allows unauthenticated attackers to access sensitive system information.
CVE-2022-33007 1Trendnet 2Tew 751dr Firmware Tew 752dru Firmware Jun 17, 2026 Jun 27, 2022 N/A· v4 8.8 HIGH· v3 5.8 MEDIUM· v2 TRENDnet Wi-Fi routers TEW751DR v1.03 and TEW-752DRU v1.03 were discovered to contain a stack overflow via the function genacgi_main.
CVE-2022-31875 1Trendnet 1Tv Ip110wn Firmware Jun 17, 2026 Jun 17, 2022 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Trendnet IP-110wn camera fw_tv-ip110wn_v2(1.2.2.68) has an xss vulnerability via the proname parameter in /admin/scheprofile.cgi
CVE-2022-31873 1Trendnet 1Tv Ip110wn Firmware Jun 17, 2026 Jun 17, 2022 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Trendnet IP-110wn camera fw_tv-ip110wn_v2(1.2.2.68) has an XSS vulnerability via the prefix parameter in /admin/general.cgi.
CVE-2022-30329 1Trendnet 1Tew 831dr Firmware Jun 17, 2026 Jun 16, 2022 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. An OS injection vulnerability exists within the web interface, allowing an attacker with valid credentials to execute arbitrary shell commands.
CVE-2022-30328 1Trendnet 1Tew 831dr Firmware Jun 17, 2026 Jun 16, 2022 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The username and password setup for the web interface does not require entering the existing password. A malicious user can change the username and pas...Show more An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The username and password setup for the web interface does not require entering the existing password. A malicious user can change the username and password of the interface.Show less
CVE-2022-30327 1Trendnet 1Tew 831dr Firmware Jun 17, 2026 Jun 16, 2022 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The web interface is vulnerable to CSRF. An attacker can change the pre-shared key of the Wi-Fi router if the interface's IP address is known.
CVE-2022-30326 1Trendnet 1Tew 831dr Firmware Jun 17, 2026 Jun 16, 2022 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The network pre-shared key field on the web interface is vulnerable to XSS. An attacker can use a simple XSS payload to crash the basic.config page of...Show more An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The network pre-shared key field on the web interface is vulnerable to XSS. An attacker can use a simple XSS payload to crash the basic.config page of the web interface.Show less
CVE-2022-30325 1Trendnet 1Tew 831dr Firmware Jun 17, 2026 Jun 16, 2022 N/A· v4 8.8 HIGH· v3 3.3 LOW· v2 An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The default pre-shared key for the Wi-Fi networks is the same for every router except for the last four digits. The device default pre-shared key for b...Show more An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The default pre-shared key for the Wi-Fi networks is the same for every router except for the last four digits. The device default pre-shared key for both 2.4 GHz and 5 GHz networks can be guessed or brute-forced by an attacker within range of the Wi-Fi network.Show less
CVE-2021-33317 1Trendnet 9Teg 30102ws Firmware Ti G102i FirmwareTi G160i Firmware+6 more Jun 17, 2026 May 11, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suffers from a null pointer dereference vulnerability. This vulnerability exists in its lldp related component. Due to fail to check if ChassisID TLV is...Show more The TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suffers from a null pointer dereference vulnerability. This vulnerability exists in its lldp related component. Due to fail to check if ChassisID TLV is contained in the packet, by sending a crafted lldp packet to the device, an attacker can crash the process due to null pointer dereference.Show less
CVE-2021-33316 1Trendnet 9Teg 30102ws Firmware Ti G102i FirmwareTi G160i Firmware+6 more Jun 17, 2026 May 11, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suffers from an integer underflow vulnerability. This vulnerability exists in its lldp related component. Due to lack of proper validation on length fiel...Show more The TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suffers from an integer underflow vulnerability. This vulnerability exists in its lldp related component. Due to lack of proper validation on length field of ChassisID TLV, by sending a crafted lldp packet to the device, integer underflow would occur and the negative number will be passed to memcpy() later, which may cause buffer overflow or invalid memory access.Show less
CVE-2021-33315 1Trendnet 9Teg 30102ws Firmware Ti G102i FirmwareTi G160i Firmware+6 more Jun 17, 2026 May 11, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suffers from an integer underflow vulnerability. This vulnerability exists in its lldp related component. Due to lack of proper validation on length fiel...Show more The TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suffers from an integer underflow vulnerability. This vulnerability exists in its lldp related component. Due to lack of proper validation on length field of PortID TLV, by sending a crafted lldp packet to the device, integer underflow would occur and the negative number will be passed to memcpy() later, which may cause buffer overflow or invalid memory access.Show less
CVE-2021-20165 1Trendnet 1Tew 827dru Firmware Jun 17, 2026 Dec 30, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Trendnet AC2600 TEW-827DRU version 2.08B01 does not properly implement csrf protections. Most pages lack proper usage of CSRF protections or mitigations. Additionally, pages that do make use of CSRF tokens are trivially...Show more Trendnet AC2600 TEW-827DRU version 2.08B01 does not properly implement csrf protections. Most pages lack proper usage of CSRF protections or mitigations. Additionally, pages that do make use of CSRF tokens are trivially bypassable as the server does not appear to validate them properly (i.e. re-using an old token or finding the token thru some other method is possible).Show less

Previous 1...567...10 Next