CVE-2024-37644

The TRENDnet TEW-814DAP v1 (FW1.01B01) wireless access point is vulnerable to a hardcoded password flaw located in the /etc/shadow.sample file. This vulnerability allows an attacker to gain unauthorized root access to the system. As a remediation, it is recommended to change the hardcoded passwor...

PT-2024-27695 · Trendnet · Trendnet Tew-814Dap

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW-814DAP version 1 FW1.01B01 Description: A command injection issue was discovered, affecting the ipv4 ping and ipv6 ping parameters at the /formSystemCheck API endpoint. This allows for potential command injection attacks...

CVE-2024-37643

The TRENDnet TEW-814DAP v1 (FW1.01B01) wireless access point is vulnerable to a stack buffer overflow via the submit-url parameter at the /formPasswordAuth endpoint. The root cause is the failure to properly validate the length of the input data, which allows operations to escape the allocated me...

CVE-2024-37643: Stack-based Buffer Overflow

TRENDnet TEW-814DAP v1FW1.01B01 was discovered to contain a stack overflow vulnerability via the submit-url parameter at /formPasswordAuth...

CVE-2024-37645: Stack-based Buffer Overflow

TRENDnet TEW-814DAP v1FW1.01B01 was discovered to contain a stack overflow vulnerability via the submit-url parameter at /formSysLog...

TRENDnet TEW-814DAP 安全漏洞

The TRENDnet TEW-814DAP is a wireless access point from TRENDnet. The TRENDnet TEW-814DAP suffers from a stack buffer overflow vulnerability that originates from the submit-url parameter at /formPasswordAuth failing to properly validate the length of the input data, which could be exploited by an...

CVE-2024-37642

The TRENDnet TEW-814DAP v1 (FW1.01B01) wireless access point is vulnerable to a command injection vulnerability. The root cause is the insufficient checking of arguments for the ipv4_ping and ipv6_ping parameters at the /formSystemCheck API endpoint. A remote attacker can exploit this to execute ...