Trendnet

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-19239 1Trendnet 1Tew 673gru Firmware Nov 21, 2024 Dec 20, 2018 N/A· v4 7.2 HIGH· v3 9.0 HIGH· v2 TRENDnet TEW-673GRU v1.00b40 devices have an OS command injection vulnerability in the start_arpping function of the timer binary, which allows remote attackers to execute arbitrary commands via three parameters (dhcpd_s...Show more TRENDnet TEW-673GRU v1.00b40 devices have an OS command injection vulnerability in the start_arpping function of the timer binary, which allows remote attackers to execute arbitrary commands via three parameters (dhcpd_start, dhcpd_end, and lan_ipaddr) passed to the apply.cgi binary through a POST request.Show less
CVE-2018-7034 1Trendnet 3Tew 751dr Firmware Tew 752dru FirmwareTew733gr Firmware Jun 17, 2026 Feb 14, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 TRENDnet TEW-751DR v1.03B03, TEW-752DRU v1.03B01, and TEW733GR v1.03B01 devices allow authentication bypass via an AUTHORIZED_GROUP=1 value, as demonstrated by a request for getcfg.php.
CVE-2014-8579 1Trendnet 1Tew 823dru Firmware Nov 21, 2024 Jan 5, 2018 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 TRENDnet TEW-823DRU devices with firmware before 1.00b36 have a hardcoded password of kcodeskcodes for the root account, which makes it easier for remote attackers to obtain access via an FTP session.
CVE-2015-1187 2Dlink Trendnet 15Dir 626l Firmware Dir 636l FirmwareDir 651 Firmware+12 more Apr 21, 2026 Sep 21, 2017 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.
CVE-2015-2880 1Trendnet 1Tv Ip743sic May 13, 2026 Apr 10, 2017 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 TRENDnet WiFi Baby Cam TV-IP743SIC has a password of admin for the backdoor root account.
CVE-2013-4659 2Asus Trendnet 2Rt Ac66u Firmware Tew 812dru Firmware May 13, 2026 Mar 14, 2017 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Buffer overflow in Broadcom ACSD allows remote attackers to execute arbitrary code via a long string to TCP port 5916. This component is used on routers of multiple vendors including ASUS RT-AC66U and TRENDnet TEW-812DRU...Show more Buffer overflow in Broadcom ACSD allows remote attackers to execute arbitrary code via a long string to TCP port 5916. This component is used on routers of multiple vendors including ASUS RT-AC66U and TRENDnet TEW-812DRU.Show less
CVE-2014-10011 1Trendnet 2Tv Ip422w Tv Ip422wn May 6, 2026 Jan 13, 2015 N/A· v4 N/A· v3 7.5 HIGH· v2 Stack-based buffer overflow in UltraCamLib in the UltraCam ActiveX Control (UltraCamX.ocx) for the TRENDnet SecurView camera TV-IP422WN allows remote attackers to execute arbitrary code via a long string to the (1) CGI_P...Show more Stack-based buffer overflow in UltraCamLib in the UltraCam ActiveX Control (UltraCamX.ocx) for the TRENDnet SecurView camera TV-IP422WN allows remote attackers to execute arbitrary code via a long string to the (1) CGI_ParamSet, (2) OpenFileDlg, (3) SnapFileName, (4) Password, (5) SetCGIAPNAME, (6) AccountCode, or (7) RemoteHost function.Show less
CVE-2013-3365 1Trendnet 1Tew 812dru Apr 29, 2026 Feb 4, 2014 N/A· v4 N/A· v3 8.5 HIGH· v2 TRENDnet TEW-812DRU router allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) wan network prefix to internet/ipv6.asp; (2) remote port to adm/management.asp; (3) pptp user...Show more TRENDnet TEW-812DRU router allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) wan network prefix to internet/ipv6.asp; (2) remote port to adm/management.asp; (3) pptp username, (4) pptp password, (5) ip, (6) gateway, (7) l2tp username, or (8) l2tp password to internet/wan.asp; (9) NtpDstStart, (10) NtpDstEnd, or (11) NtpDstOffset to adm/time.asp; or (12) device url to adm/management.asp. NOTE: vectors 9, 10, and 11 can be exploited by unauthenticated remote attackers by leveraging CVE-2013-3098.Show less
CVE-2013-3098 1Trendnet 2Tew 812dru Tew 812dru Firmware Apr 29, 2026 Feb 4, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Multiple cross-site request forgery (CSRF) vulnerabilities in TRENDnet TEW-812DRU router with firmware before 1.0.9.0 allow remote attackers to hijack the authentication of administrators for requests that (1) change adm...Show more Multiple cross-site request forgery (CSRF) vulnerabilities in TRENDnet TEW-812DRU router with firmware before 1.0.9.0 allow remote attackers to hijack the authentication of administrators for requests that (1) change admin credentials in a request to setSysAdm.cgi, (2) enable remote management or (3) enable port forwarding in an Apply action to uapply.cgi, or (4) have unspecified impact via a request to setNTP.cgi. NOTE: some of these details are obtained from third party information.Show less
CVE-2012-4876 1Trendnet 2Securview Wireless Internet Camera Securview Wireless Internet Camera Activex Control Apr 29, 2026 Sep 6, 2012 N/A· v4 N/A· v3 10.0 HIGH· v2 Stack-based buffer overflow in the UltraMJCam ActiveX Control in TRENDnet SecurView TV-IP121WN Wireless Internet Camera allows remote attackers to execute arbitrary code via a long string to the OpenFileDlg method.

Previous 1...6 7 8 910