trendnet Vulnerability Advisory Catalog

Total 185 security vulnerabilities recorded for trendnet software and firmware.

← Back to All Vendors
Component: tew-827dru_firmware

Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses credentials for the smb functionality of the device. Usernames and passwords for all s...

📅 2021-12-30
CVSS 4.9 Dossier →
Component: tew-827dru_firmware

Trendnet AC2600 TEW-827DRU version 2.08B01 leaks information via the ftp web page. Usernames and passwords for all ftp users are revealed in plaintext...

📅 2021-12-30
CVSS 4.9 Dossier →
Component: tew-827dru_firmware

Trendnet AC2600 TEW-827DRU version 2.08B01 stores credentials in plaintext. Usernames and passwords are stored in plaintext in the config files on the...

📅 2021-12-30
CVSS 4.9 Dossier →
Component: tew-827dru_firmware

Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient protections for the UART functionality. A malicious actor with physical access to ...

📅 2021-12-30
CVSS 6.8 Dossier →
Component: tew-827dru_firmware

Trendnet AC2600 TEW-827DRU version 2.08B01 contains a command injection vulnerability in the smb functionality of the device. The username parameter u...

📅 2021-12-30
CVSS 8.8 Dossier →
Component: tew-827dru_firmware

Trendnet AC2600 TEW-827DRU version 2.08B01 is vulnerable to command injection. The system log functionality of the firmware allows for command injecti...

📅 2021-12-30
CVSS 8.8 Dossier →
CVE-2021-20158 CRITICAL
Component: tew-827dru_firmware

Trendnet AC2600 TEW-827DRU version 2.08B01 contains an authentication bypass vulnerability. It is possible for an unauthenticated, malicous actor to f...

📅 2021-12-30
CVSS 9.8 Dossier →
Component: tew-827dru_firmware

It is possible for an unauthenticated, malicious user to force the device to reboot due to a hidden administrative command....

📅 2021-12-30
CVSS 7.5 Dossier →
Component: tew-827dru_firmware

Trendnet AC2600 TEW-827DRU version 2.08B01 contains an improper access control configuration that could allow for a malicious firmware update. It is p...

📅 2021-12-30
CVSS 6.5 Dossier →
CVE-2021-20155 CRITICAL
Component: tew-827dru_firmware

Trendnet AC2600 TEW-827DRU version 2.08B01 makes use of hardcoded credentials. It is possible to backup and restore device configurations via the mana...

📅 2021-12-30
CVSS 9.8 Dossier →
Component: tew-827dru_firmware

Trendnet AC2600 TEW-827DRU version 2.08B01 contains an security flaw in the web interface. HTTPS is not enabled on the device by default. This results...

📅 2021-12-30
CVSS 7.5 Dossier →
Component: tew-827dru_firmware

Trendnet AC2600 TEW-827DRU version 2.08B01 contains a symlink vulnerability in the bittorrent functionality. If enabled, the bittorrent functionality ...

📅 2021-12-30
CVSS 6.8 Dossier →
Component: tew-827dru_firmware

Trendnet AC2600 TEW-827DRU version 2.08B01 lacks proper authentication to the bittorrent functionality. If enabled, anyone is able to visit and modify...

📅 2021-12-30
CVSS 6.5 Dossier →
CVE-2021-20151 CRITICAL
Component: tew-827dru_firmware

Trendnet AC2600 TEW-827DRU version 2.08B01 contains a flaw in the session management for the device. The router's management software manages web sess...

📅 2021-12-30
CVSS 10.0 Dossier →
Component: tew-827dru_firmware

Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses information via redirection from the setup wizard. Authentication can be bypassed and ...

📅 2021-12-30
CVSS 5.3 Dossier →
CVE-2021-20149 CRITICAL
Component: tew-827dru_firmware

Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient access controls for the WAN interface. The default iptables ruleset for governing ...

📅 2021-12-30
CVSS 9.8 Dossier →
Component: tew-755ap_firmware

A Format String vulnerablity exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could ...

📅 2021-08-10
CVSS 6.5 Dossier →
Component: tew-755ap_firmware

Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, wh...

📅 2021-08-10
CVSS 7.5 Dossier →
Component: tew-755ap_firmware

Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03 by ...

📅 2021-08-10
CVSS 7.5 Dossier →
Component: tew-755ap_firmware

Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03 by ...

📅 2021-08-10
CVSS 7.5 Dossier →
Component: tew-755ap_firmware

Null Pointer Deference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, whic...

📅 2021-08-10
CVSS 7.5 Dossier →
Component: tew-755ap_firmware

Null Pointer Dereference vulnerability in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which cou...

📅 2021-08-10
CVSS 7.5 Dossier →
Component: tv-ip110wn_firmware

Cross Site Scripting (XSS) vulnerability in TRENDnet TV-IP110WN V1.2.2.64 V1.2.2.65 V1.2.2.68 via the profile parameter. in a GET request in view.cgi....

📅 2021-08-10
CVSS 6.1 Dossier →
Component: tw100-s4w1ca_firmware

In TrendNet TW100-S4W1CA 2.3.32, it is possible to inject arbitrary JavaScript into the router's web interface via the "echo" command....

📅 2021-06-17
CVSS 6.1 Dossier →
Page 6 of 8 (185 Total Records)