CVE-2021-32426

In TrendNet TW100-S4W1CA 2.3.32, it is possible to inject arbitrary JavaScript into the router's web interface via the "echo" command...

CVE-2021-32424

In TrendNet TW100-S4W1CA 2.3.32, due to a lack of proper session controls, a threat actor could make unauthorized changes to an affected router via a specially crafted web page. If an authenticated user were to interact with a malicious web page it could allow for a complete takeover of the route...

Design/Logic Flaw

In TrendNet TW100-S4W1CA 2.3.32, due to a lack of proper session controls, a threat actor could make unauthorized changes to an affected router via a specially crafted web page. If an authenticated user were to interact with a malicious web page it could allow for a complete takeover of the route...

CVE-2021-32426

In TrendNet TW100-S4W1CA 2.3.32, it is possible to inject arbitrary JavaScript into the router's web interface via the "echo" command...

CVE-2021-32426

The connected sources confirm a Cross-Site Scripting (XSS) flaw in TrendNet TW100-S4W1CA router with firmware version 2.3.32. The vulnerability allows injecting arbitrary JavaScript into the router’s web interface via the echo command, enabling UI-scripted content execution. This is the concrete ...

CVE-2021-32424

The CVE-2021-32424 entry concerns TrendNet TW100-S4W1CA router, version 2.3.32. The vulnerability is a CSRF-style flaw arising from insufficient session controls, allowing an attacker to induce unauthorized router changes through a specially crafted web page. If an authenticated user visits a mal...

CVE-2021-32424

In TrendNet TW100-S4W1CA 2.3.32, due to a lack of proper session controls, a threat actor could make unauthorized changes to an affected router via a specially crafted web page. If an authenticated user were to interact with a malicious web page it could allow for a complete takeover of the route...

CVE-2021-32426: Improper Neutralization of Input During Web Page Generation

In TrendNet TW100-S4W1CA 2.3.32, it is possible to inject arbitrary JavaScript into the router's web interface via the "echo" command...

PT-2021-19703

Name of the Vulnerable Software and Affected Versions: TrendNet TW100-S4W1CA version 2.3.32 Description: The issue allows for the injection of arbitrary JavaScript into the router's web interface via the echo command. This can potentially lead to unauthorized access or control of the router's web...

PT-2021-19702

Name of the Vulnerable Software and Affected Versions: TrendNet TW100-S4W1CA version 2.3.32 Description: The issue is related to a lack of proper session controls, allowing a threat actor to make unauthorized changes to the affected router via a specially crafted web page. If an authenticated use...

CVE-2021-32424: Cross-Site Request Forgery (CSRF)

In TrendNet TW100-S4W1CA 2.3.32, due to a lack of proper session controls, a threat actor could make unauthorized changes to an affected router via a specially crafted web page. If an authenticated user were to interact with a malicious web page it could allow for a complete takeover of the route...

TrendNet TW100-S4W1CA 跨站请求伪造漏洞

The TrendNet TW100-S4W1CA is a four-port broadband router. A cross-site request forgery vulnerability exists in the TrendNet TW100-S4W1CA version 2.3.32. The vulnerability stems from a lack of proper session control. An attacker could exploit the vulnerability to make unauthorized changes to the...

TrendNet TW100-S4W1CA 跨站脚本漏洞

The TrendNet TW100-S4W1CA is a four-port broadband router. A cross-site scripting vulnerability exists in TrendNet TW100-S4W1CA version 2.3.32. The vulnerability can be exploited to inject arbitrary JavaScript into the router's web interface via the echo command...

Weak Password Vulnerability in TRENDnet TV-IP651W

TRENDnet is one of the world's leading data networking specialists, headquartered in Silicon Valley. The TRENDnet TV-IP651W suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Weak password vulnerability in TRENDnet TV-IP302PI

TRENDnet is one of the world's leading data networking specialists, headquartered in Silicon Valley, with several subsidiaries in Europe and the United States. A weak password vulnerability exists in TRENDnet TV-IP302PI, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in TRENDnet TV-IP651WI

TRENDnet is one of the world's leading data networking specialists, headquartered in Silicon Valley, with several subsidiaries in Europe and the United States. TRENDnet TV-IP651WI suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Weak password vulnerability in TRENDnet webcams

TRENDnet is one of the world's leading data networking specialists. A weak password vulnerability exists in TRENDnet webcams, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in TRENDnet TV-IP121W

The TV-IP121W is a wireless network camera from TRENDnet. An unauthorized access vulnerability exists in the TRENDnet TV-IP121W, which can be exploited by attackers to obtain sensitive information...

The vulnerability of the dns_query.cgi component of D-Link DIR-825 and TRENDnet TEW-632BRP routers allows a hacker to execute arbitrary commands.

The vulnerability of the dnsquery.cgi component of D-Link DIR-825 and TRENDnet TEW-632BRP routers exists due to the failure to address the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the system_time.cgi component of D-Link DIR-825 and TRENDnet TEW-632BRP router microprograms allows a hacker to execute arbitrary commands.

The vulnerability of the systemtime.cgi component in D-Link DIR-825 and TRENDnet TEW-632BRP routers exists due to the failure to address the need to neutralize specific elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary...