CVE-2019-13152: Improper Neutralization of Special Elements used in a Command

An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi exploitable with authentication via the IP Address in Add Gaming Rule...

TRENDnet TEW-827DRU Command Injection Vulnerability (CNVD-2019-25519)

The TRENDnet TEW-827DRU is a wireless router from TRENDnet. A command injection vulnerability exists in the apply.cgi file in the TRENDnet TEW-827DRU using firmware prior to version 2.05B11. The vulnerability stems from a network system or product not properly filtering specific elements of...

PT-2019-13161

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-827DRU versions prior to 2.05B11 Description An issue was discovered in the firmware, where a command injection is present in the "apply.cgi" endpoint, specifically via the TCP Ports To Open in Add Gaming Rule, and it is exploitab...

TRENDnet TEW-827DRU Command Injection Vulnerability (CNVD-2019-25520)

The TRENDnet TEW-827DRU is a wireless router from TRENDnet. A command injection vulnerability exists in the apply.cgi file in the TRENDnet TEW-827DRU using firmware prior to version 2.05B11. The vulnerability stems from a network system or product not properly filtering specific elements of...

PT-2019-13160

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-827DRU versions prior to 2.05B11 Description An issue was discovered in the firmware, where a command injection is possible in the "apply.cgi" endpoint, specifically via the Private Port in Add Virtual Server, and it requires...

PT-2019-13156

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-827DRU versions prior to 2.05B11 Description An issue was discovered in the firmware, where a command injection is possible in the apply.cgi endpoint, requiring authentication, via the key passwd in Routing RIP Settings...

TRENDnet TEW-827DRU Command Injection Vulnerability

The TRENDnet TEW-827DRU is a wireless router from TRENDnet. A command injection vulnerability exists in the apply.cgi file in the TRENDnet TEW-827DRU using firmware prior to version 2.05B11. The vulnerability stems from a network system or product not properly filtering specific elements of...

PT-2019-13162

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-827DRU versions prior to 2.05B11 Description An issue was discovered in the firmware, where a command injection is possible in the "apply.cgi" endpoint, specifically via the IP Address in the Add Virtual Server section, and this c...

CVE-2019-13148: Improper Neutralization of Special Elements used in a Command

An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi exploitable with authentication via the UDP Ports To Open in Add Gaming Rule...

CVE-2019-13154: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi exploitable with authentication via the TCP Ports To Open in Add Gaming Rule...

CVE-2019-13153: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi exploitable with authentication via the Private Port in Add Virtual Server...

CVE-2019-13150: Improper Neutralization of Special Elements used in a Command

An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi exploitable with authentication. The command injection exists in the key ipaddr...

PT-2019-13158

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-827DRU versions prior to 2.05B11 Description An issue was discovered in the firmware, where a command injection is possible in the "apply.cgi" endpoint, specifically via the "action" parameter with the value "set sta enrollee pin...

PT-2019-13155

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-827DRU versions prior to 2.05B11 Description An issue was discovered in the firmware, where a command injection is possible in the "apply.cgi" endpoint, specifically via the UDP Ports To Open in Add Gaming Rule, and this can be...

CVE-2019-13149: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi exploitable with authentication via the key passwd in Routing RIP Settings...

CVE-2019-11418

apply.cgi on the TRENDnet TEW-632BRP 1.010B32 router has a buffer overflow via long strings to the SOAPACTION:HNAP1 interface...

PT-2019-12303

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-632BRP version 1.010B32 Description The issue concerns a buffer overflow that can be triggered by sending long strings to the "SOAPACTION:HNAP1" interface through the apply.cgi file. Recommendations For version 1.010B32, consider...

CVE-2019-11418: Improper Restriction of Operations within the Bounds of a Memory Buffer

apply.cgi on the TRENDnet TEW-632BRP 1.010B32 router has a buffer overflow via long strings to the SOAPACTION:HNAP1 interface...

CVE-2019-6441

An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM3300 5.0.0.55 devices. The password reset functionality of the router doesn't have backend validation for the current password and doesn't require any type of authentication. By...

CVE-2019-6441

CVE-2019-6441 affects Shenzhen Coship RT3050/RT3052/RT7620/WM3300 devices (firmware versions 4.0.0.40/4.0.0.48/10.0.0.49/5.0.0.54/5.0.0.55). The issue is an unauthenticated password reset function: the router’s password reset workflow does not validate the current password and requires no authent...