TrendNet TW100-S4W1CA Cross-Site Request Forgery Vulnerability

The TrendNet TW100-S4W1CA is a four-port broadband router. A cross-site request forgery vulnerability exists in the TrendNet TW100-S4W1CA version 2.3.32. The vulnerability stems from a lack of proper session control. An attacker could exploit the vulnerability to make unauthorized changes to the...

Design/Logic Flaw

In TrendNet TW100-S4W1CA 2.3.32, due to a lack of proper session controls, a threat actor could make unauthorized changes to an affected router via a specially crafted web page. If an authenticated user were to interact with a malicious web page it could allow for a complete takeover of the route...

TrendNet TW100-S4W1CA 跨站请求伪造漏洞

The TrendNet TW100-S4W1CA is a four-port broadband router. A cross-site request forgery vulnerability exists in the TrendNet TW100-S4W1CA version 2.3.32. The vulnerability stems from a lack of proper session control. An attacker could exploit the vulnerability to make unauthorized changes to the...

CVE-2021-32426: Improper Neutralization of Input During Web Page Generation

In TrendNet TW100-S4W1CA 2.3.32, it is possible to inject arbitrary JavaScript into the router's web interface via the "echo" command...

PT-2021-19702

Name of the Vulnerable Software and Affected Versions: TrendNet TW100-S4W1CA version 2.3.32 Description: The issue is related to a lack of proper session controls, allowing a threat actor to make unauthorized changes to the affected router via a specially crafted web page. If an authenticated use...

PT-2021-19703

Name of the Vulnerable Software and Affected Versions: TrendNet TW100-S4W1CA version 2.3.32 Description: The issue allows for the injection of arbitrary JavaScript into the router's web interface via the echo command. This can potentially lead to unauthorized access or control of the router's web...

CVE-2021-32424: Cross-Site Request Forgery (CSRF)

In TrendNet TW100-S4W1CA 2.3.32, due to a lack of proper session controls, a threat actor could make unauthorized changes to an affected router via a specially crafted web page. If an authenticated user were to interact with a malicious web page it could allow for a complete takeover of the route...