CVE-2022-30328

CVE-2022-30328 affects TRENDnet TEW-831DR 1.0 with firmware 601.130.1.1356. The web interface’s username/password setup does not require the existing password, allowing an attacker to change the interface credentials. This vulnerability enables an unauthorized user to modify access credentials fo...

CVE-2022-30325

CVE-2022-30325 affects TRENDnet TEW-831DR (firmware 601.130.1.1356). The issue: the default Wi‑Fi pre‑shared key is the same across routers (except last four digits) for both 2.4 GHz and 5 GHz networks, enabling an attacker within Wi‑Fi range to guess or brute‑force the PSK and gain access. Explo...

CVE-2022-30325

An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The default pre-shared key for the Wi-Fi networks is the same for every router except for the last four digits. The device default pre-shared key for both 2.4 GHz and 5 GHz networks can be guessed or brute-forced by an attacker...

TRENDnet TEW-831DR 跨站请求伪造漏洞

The TRENDnet TEW-831DR is a router from Trendnet, Inc. A security vulnerability exists in the TRENDnet TEW-831DR version 1.0 601.130.1.1356, which originates from the web interface's username and password settings that do not require the entry of an existing password. A malicious user can change...

PT-2022-2962

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-831DR version 1.0 601.130.1.1356 Description An issue was found where the default pre-shared key for the Wi-Fi networks is the same for every router except for the last four digits. This allows an attacker within range of the Wi-F...

TRENDnet TEW-831DR 操作系统命令注入漏洞

The TRENDnet TEW-831DR is a router from TRENDnet. A security vulnerability exists in the TRENDnet TEW-831DR version 1.0 601.130.1.1356, which originates from a system command injection vulnerability in the web interface that could allow an attacker with valid credentials to execute arbitrary shel...

CVE-2022-30325: Weak Password Requirements

An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The default pre-shared key for the Wi-Fi networks is the same for every router except for the last four digits. The device default pre-shared key for both 2.4 GHz and 5 GHz networks can be guessed or brute-forced by an attacker...

CVE-2022-30326: Improper Neutralization of Input During Web Page Generation

An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The network pre-shared key field on the web interface is vulnerable to XSS. An attacker can use a simple XSS payload to crash the basic.config page of the web interface...

TRENDnet TEW-831DR 跨站请求伪造漏洞

The TRENDnet TEW-831DR is a router from Trendnet, Inc. A security vulnerability exists in the TRENDnet TEW-831DR version 1.0 601.130.1.1356, which stems from the vulnerability of the web interface to cross-site request forgery attacks. An attacker can change the pre-shared key of a Wi-Fi router i...

PT-2022-2963

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-831DR version 1.0 601.130.1.1356 Description The issue is related to a CSRF vulnerability in the web interface of the TRENDnet TEW-831DR router. An attacker can exploit this vulnerability to change the pre-shared key of the Wi-Fi...

PT-2022-2966

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-831DR version 1.0 601.130.1.1356 Description The issue is related to an OS injection vulnerability within the web interface of the TRENDnet TEW-831DR router. This vulnerability allows an attacker with valid credentials to execute...

PT-2022-2965

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-831DR version 1.0 601.130.1.1356 Description The issue is related to the username and password setup for the web interface, which does not require entering the existing password. This allows a malicious user to change the username...

TRENDnet TEW-831DR 安全漏洞

TRENDnet TEW-831DR is a router from Trendnet, Inc. A security vulnerability exists in TRENDnet TEW-831DR version 1.0 601.130.1.1356, which stems from the fact that the default pre-shared key for Wi-Fi networks is the same for every router, except for the last four digits. An attacker within the...

PT-2022-2964

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-831DR version 1.0 601.130.1.1356 Description An issue was found in the TRENDnet TEW-831DR device where the network pre-shared key field on the web interface is vulnerable to cross-site scripting XSS. This vulnerability can be...

CVE-2022-30328: Cross-Site Request Forgery (CSRF)

An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The username and password setup for the web interface does not require entering the existing password. A malicious user can change the username and password of the interface...

CVE-2022-30329: Improper Neutralization of Special Elements used in an OS Command

An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. An OS injection vulnerability exists within the web interface, allowing an attacker with valid credentials to execute arbitrary shell commands...

CVE-2022-30327: Cross-Site Request Forgery (CSRF)

An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The web interface is vulnerable to CSRF. An attacker can change the pre-shared key of the Wi-Fi router if the interface's IP address is known...

TRENDnet TEW-831DR 跨站脚本漏洞

The TRENDnet TEW-831DR is a router from Trendnet, Inc. A security vulnerability exists in the TRENDnet TEW-831DR version 1.0 601.130.1.1356, which stems from the vulnerability of the Network Pre-Shared Key field on the web interface to cross-site scripting attacks. An attacker can use a simple XS...

TRENDnet TI-PG1284i Integer Underflow Vulnerability

The TRENDnet TI-PG Series is a series of switches from TRENDnet. A security vulnerability exists in TRENDnet TI-PG1284i versions prior to 2.0.2.S0, no details of the vulnerability are provided at this time...

TRENDnet TI-PG1284i integer underflow vulnerability (CNVD-2022-40314)

The TRENDnet TI-PG Series is a series of switches from TRENDnet. A security vulnerability exists in TRENDnet TI-PG1284i versions prior to 2.0.2.S0, no details of the vulnerability are provided at this time...