Lucene search
+L

2502 matches found

OSV
OSV
•added 2024/03/15 8:15 a.m.•12 views

CVE-2024-28353

There is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware version 2.10B01. An attacker can inject commands into the post request parameters usapps.config.smbadminname in the apply.cgi interface, thereby gaining root shell privileges...

8.8CVSS5.8AI score0.02121EPSS
SaveExploits1References1
NVD
NVD
•added 2024/03/15 8:15 a.m.•28 views

CVE-2024-28353

There is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware version 2.10B01. An attacker can inject commands into the post request parameters usapps.config.smbadminname in the apply.cgi interface, thereby gaining root shell privileges...

8.8CVSS7.4AI score0.02121EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/03/15 12:00 a.m.•13 views

TRENDnet TEW-827DRU Security Vulnerability

The TRENDnet TEW-827DRU is a wireless router from TRENDnet. A security vulnerability exists in firmware version 2.10B01 of the TRENDnet TEW-827DRU, which stems from the presence of a command injection vulnerability that could allow an attacker to gain root shell privileges via command injection...

10CVSS7.9AI score0.02218EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/03/15 12:00 a.m.•20 views

CVE-2024-28354

There is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware version 2.10B01. An attacker can inject commands into the post request parameters usapps.@smb%d.username in the apply.cgi interface, thereby gaining root shell privileges...

7.8AI score0.02218EPSS
SaveExploits1References1
CVE
CVE
•added 2024/03/15 12:00 a.m.•78 views

CVE-2024-28354

The TRENDnet TEW-827DRU router, specifically running firmware version 2.10B01 , is susceptible to a command injection vulnerability in its apply.cgi interface. The root cause is a failure to properly neutralize special elements in the usapps.@smb[%d].username POST request parameter. A remote atta...

10CVSS7.7AI score0.02218EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2024/03/15 12:00 a.m.•37 views

CVE-2024-28354

There is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware version 2.10B01. An attacker can inject commands into the post request parameters usapps.@smb%d.username in the apply.cgi interface, thereby gaining root shell privileges...

7.7AI score0.02218EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/03/15 12:00 a.m.•26 views

PT-2024-2195 · Trendnet · Trendnet Tew-827Dru

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW-827DRU router version 2.10B01 Description: There is a command injection issue in the apply.cgi interface, allowing an attacker to inject commands into the post request parameters usapps.config.smb admin name, thereby gaining root...

9CVSS7.9AI score0.02121EPSS
SaveExploits1References17
Vulnrichment
Vulnrichment
•added 2024/03/15 12:00 a.m.•19 views

CVE-2024-28353

There is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware version 2.10B01. An attacker can inject commands into the post request parameters usapps.config.smbadminname in the apply.cgi interface, thereby gaining root shell privileges...

7.8AI score0.02121EPSS
SaveExploits1References1
CVE
CVE
•added 2024/03/15 12:00 a.m.•101 views

CVE-2024-28353

The TRENDnet TEW-827DRU router, running firmware version 2.10B01 , is vulnerable to a command injection vulnerability in the apply.cgi interface. The root cause is the lack of proper neutralization for special elements in the usapps.config.smb_admin_name POST request parameter. A successful explo...

8.8CVSS7.7AI score0.02121EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/15 12:00 a.m.•3 views

CVE-2024-28353: Improper Neutralization of Special Elements used in a Command

There is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware version 2.10B01. An attacker can inject commands into the post request parameters usapps.config.smbadminname in the apply.cgi interface, thereby gaining root shell privileges...

8.8CVSS5.9AI score0.02121EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/15 12:00 a.m.•4 views

CVE-2024-28354: Improper Neutralization of Special Elements used in a Command

There is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware version 2.10B01. An attacker can inject commands into the post request parameters usapps.@smb%d.username in the apply.cgi interface, thereby gaining root shell privileges...

10CVSS5.9AI score0.02218EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/03/15 12:00 a.m.•36 views

TRENDnet TEW-827DRU Security Vulnerability

The TRENDnet TEW-827DRU is a wireless router from TRENDnet. A security vulnerability exists in firmware version 2.10B01 of the TRENDnet TEW-827DRU, which stems from the presence of a command injection vulnerability that could allow an attacker to gain root shell privileges via command injection...

8.8CVSS7.9AI score0.02121EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/03/08 12:00 a.m.•16 views

PT-2024-14058 · Trendnet · Trendnet Ac1200 Tew-821Dap

Name of the Vulnerable Software and Affected Versions: TRENDnet Trendnet AC1200 TEW-821DAP version 3.00b06 Description: The issue allows an attacker to execute arbitrary code via the adm mod pwd action, which is a buffer overflow vulnerability. This vulnerability can be exploited to gain...

8CVSS8.6AI score0.00498EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2024/03/08 12:00 a.m.•22 views

PT-2024-14057 · Trendnet · Trendnet Ac1200 Tew-821Dap

Name of the Vulnerable Software and Affected Versions: TRENDnet AC1200 TEW-821DAP version 3.00b06 Description: A Buffer Overflow issue allows an attacker to execute arbitrary code via the adm add user action. This can be exploited to gain unauthorized access and control over the device...

8CVSS8.2AI score0.00498EPSS
SaveExploits1References8
OSV
OSV
•added 2024/02/29 1:42 a.m.•12 views

CVE-2023-51835

An issue in TRENDnet TEW-822DRE v.1.03B02 allows a local attacker to execute arbitrary code via the parameters ipv4ping in the /boafrm/formSystemCheck...

6.8CVSS6.1AI score0.07319EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2024/02/29 1:42 a.m.•12 views

CVE-2023-51835

An issue in TRENDnet TEW-822DRE v.1.03B02 allows a local attacker to execute arbitrary code via the parameters ipv4ping in the /boafrm/formSystemCheck...

6.8CVSS6.2AI score0.07319EPSS
SaveExploits1References3
NVD
NVD
•added 2024/02/29 1:42 a.m.•23 views

CVE-2023-51835

An issue in TRENDnet TEW-822DRE v.1.03B02 allows a local attacker to execute arbitrary code via the parameters ipv4ping in the /boafrm/formSystemCheck...

6.8CVSS7.2AI score0.07319EPSS
SaveExploits1References2
Prion
Prion
•added 2024/02/29 1:42 a.m.•54 views

Code injection

An issue in TRENDnet TEW-822DRE v.1.03B02 allows a local attacker to execute arbitrary code via the parameters ipv4ping in the /boafrm/formSystemCheck...

8.1AI score0.07319EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/02/29 12:00 a.m.•20 views

TRENDnet TEW-822DRE Security Vulnerability

The TRENDnet TEW-822DRE is a dual-band wireless router from TRENDnet. A security vulnerability exists in the TRENDnet TEW-822DRE version v.1.03B02, which originates from a vulnerability that allows a local attacker to execute arbitrary code via the parameter ipv4ping in /boafrm/formSystemCheck...

6.8CVSS7.5AI score0.07319EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/02/26 12:00 a.m.•18 views

PT-2024-2329 · Trendnet · Trendnet Tew-827Dru

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW-827DRU router version 2.10B01 Description: The issue is related to a command injection vulnerability in the apply.cgi interface. An attacker can inject commands into the post request parameters usapps.@smb%d.username, potentially...

10CVSS8.4AI score0.02218EPSS
SaveExploits1References12
Rows per page
Query Builder