Read the docs

TRENDnet

Records241All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical67CVSS 9.0–10.0
CVSS high108CVSS 7.0–8.9

Exploited now

TRENDnet records in CISA KEV
TI-2015-01070 D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2022-03-25

Components

Products in the NVD configurations · select one to filter the records
Tew-827dru Firmware 42 records HIGH Tew-755ap Firmware 26 records HIGH Tew-652brp Firmware 10 records HIGH Tew-821dap Firmware 9 records HIGH Tew-657brm Firmware 8 records HIGH Tew-820ap Firmware 8 records HIGH Tew-651br Firmware 7 records CRITICAL Tew-632brp Firmware 6 records HIGH

Records

42 records in Tew-827dru Firmware · all components

TI-2021-03458 CVE-2021-20158 · GHSA-3r6m-8r6h-j558

Missing authentication in Trendnet AC2600 TEW-827DRU

Priority MEDIUM 54

Trendnet AC2600 TEW-827DRU version 2.08B01 contains an authentication bypass vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.09618 Published 2021-12-30 No fix listed CWE-306
TI-2019-09962 CVE-2019-13278 · GHSA-7wvr-mcrf-ff53

TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains multiple command…

Priority MEDIUM 53

TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains multiple command injections when processing user input for the setup wizard, allowing an unauthenticated user to run arbitrary commands on the device…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.08783 Published 2019-07-10 No fix listed CWE-78
TI-2021-03450 CVE-2021-20150 · GHSA-6wmh-r824-376w

Missing authentication in Trendnet AC2600 TEW-827DRU

Priority MEDIUM 52

Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses information via redirection from the setup wizard.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.4006 Published 2021-12-30 No fix listed CWE-306
TI-2019-09963 CVE-2019-13279 · GHSA-h7jr-fg98-884r

TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains multiple…

Priority MEDIUM 47

TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains multiple stack-based buffer overflows when processing user input for the setup wizard, allowing an unauthenticated user to execute arbitrary code.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02712 Published 2019-07-10 No fix listed CWE-787
TI-2021-03451 CVE-2021-20151 · GHSA-hqq7-2rg7-fxx5

Session fixation in Trendnet AC2600 TEW-827DRU

Priority MEDIUM 46

Trendnet AC2600 TEW-827DRU version 2.08B01 contains a flaw in the session management for the device.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01664 Published 2021-12-30 No fix listed CWE-384
TI-2021-03449 CVE-2021-20149 · GHSA-5rm5-xp9h-jf8q

Incorrect authorization in Trendnet AC2600 TEW-827DRU

Priority MEDIUM 45

Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient access controls for the WAN interface.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01492 Published 2021-12-30 No fix listed CWE-863
TI-2021-03460 CVE-2021-20160 · GHSA-wjhv-44c8-252g

OS command injection in Trendnet AC2600 TEW-827DRU

Priority MEDIUM 44

Trendnet AC2600 TEW-827DRU version 2.08B01 contains a command injection vulnerability in the smb functionality of the device.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03134 Published 2021-12-30 No fix listed CWE-78
TI-2021-03459 CVE-2021-20159 · GHSA-x7qm-wgfg-3vpc

OS command injection in Trendnet AC2600 TEW-827DRU

Priority MEDIUM 44

Trendnet AC2600 TEW-827DRU version 2.08B01 is vulnerable to command injection.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03109 Published 2021-12-30 No fix listed CWE-78
TI-2020-11027 CVE-2020-14075 · GHSA-gqj9-jfv8-pcr6

TRENDnet TEW-827DRU devices through 2.06B04 contain multiple command injections in…

Priority MEDIUM 44

TRENDnet TEW-827DRU devices through 2.06B04 contain multiple command injections in apply.cgi via the action pppoe_connect, ru_pppoe_connect, or dhcp_connect with the key wan_ifname (or wan0_dns), allowing an authenticate…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03069 Published 2020-06-15 No fix listed CWE-78
TI-2020-11033 CVE-2020-14081 · GHSA-5vph-wh8h-x2qx

TRENDnet TEW-827DRU devices through 2.06B04 contain multiple command injections in…

Priority MEDIUM 42

TRENDnet TEW-827DRU devices through 2.06B04 contain multiple command injections in apply.cgi via the action send_log_email with the key auth_acname (or auth_passwd), allowing an authenticated user to run arbitrary comman…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02231 Published 2020-06-15 No fix listed CWE-78
TI-2019-09964 CVE-2019-13280 · GHSA-mvfq-76q4-927c

TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains a stack-based…

Priority MEDIUM 42

TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains a stack-based buffer overflow while returning an error message to the user about failure to resolve a hostname during a ping or traceroute attempt.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02038 Published 2019-07-09 No fix listed CWE-787
Load more
Open these records in search →