Lucene search
K

1964 matches found

RedhatCVE
RedhatCVE
added 2025/02/14 5:34 a.m.11 views

CVE-2024-36729

TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action wizardipv6 with a sufficiently long reboottype key...

6.3CVSS8.1AI score0.05049EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/02/14 5:3 a.m.10 views

CVE-2024-36728

TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action vlansetting with a sufficiently long dns1 or dns 2 key...

8.1CVSS8.1AI score0.05155EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/02/13 12:36 a.m.11 views

CVE-2025-25523

Buffer overflow vulnerability in Trendnet TEG-40128 Web Smart Switch v11.00.023 due to the lack of length verification, which is related to the mobile access point setup operation. The attacker can directly control the remote target device by successfully exploiting this vulnerability...

5.9CVSS7.1AI score0.0015EPSS
Exploits0References1
OSV
OSV
added 2025/02/11 7:15 p.m.4 views

CVE-2025-25523

Buffer overflow vulnerability in Trendnet TEG-40128 Web Smart Switch v11.00.023 due to the lack of length verification, which is related to the mobile access point setup operation. The attacker can directly control the remote target device by successfully exploiting this vulnerability...

5.9CVSS5.8AI score0.0015EPSS
Exploits0References1
NVD
NVD
added 2025/02/11 7:15 p.m.15 views

CVE-2025-25523

Buffer overflow vulnerability in Trendnet TEG-40128 Web Smart Switch v11.00.023 due to the lack of length verification, which is related to the mobile access point setup operation. The attacker can directly control the remote target device by successfully exploiting this vulnerability...

5.9CVSS0.0015EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/02/11 12:0 a.m.7 views

CVE-2025-25523

Buffer overflow vulnerability in Trendnet TEG-40128 Web Smart Switch v11.00.023 due to the lack of length verification, which is related to the mobile access point setup operation. The attacker can directly control the remote target device by successfully exploiting this vulnerability...

7.4AI score0.0015EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/11 12:0 a.m.2 views

TRENDnet TEG-40128 安全漏洞

The TRENDnet TEG-40128 is a smart switch from Trendnet, Inc. A security vulnerability exists in the TRENDnet TEG-40128 v1 1.00.023 version, which stems from a lack of length validation and a buffer overflow vulnerability that could cause a remote target device to crash or execute arbitrary comman...

5.9CVSS7.6AI score0.0015EPSS
Exploits0References2
CVE
CVE
added 2025/02/11 12:0 a.m.75 views

CVE-2025-25523

CVE-2025-25523 affects Trendnet TEG-40128 Web Smart Switch, version 1(1.00.023). The vulnerability is a buffer overflow caused by lack of length verification in the mobile access point setup operation, allowing an attacker to directly control the remote device. The issue is documented across mult...

5.9CVSS6.9AI score0.0015EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/02/11 12:0 a.m.15 views

CVE-2025-25523

Buffer overflow vulnerability in Trendnet TEG-40128 Web Smart Switch v11.00.023 due to the lack of length verification, which is related to the mobile access point setup operation. The attacker can directly control the remote target device by successfully exploiting this vulnerability...

0.0015EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/02/11 12:0 a.m.3 views

PT-2025-6378 · Trendnet · Teg-40128 Web Smart Switch

Name of the Vulnerable Software and Affected Versions: Trendnet TEG-40128 Web Smart Switch version 11.00.023 Description: The issue is related to a buffer overflow vulnerability due to the lack of length verification in the mobile access point setup operation. This vulnerability allows an attacke...

5.9CVSS7.5AI score0.0015EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/02/04 11:12 p.m.7 views

CVE-2024-0919

A vulnerability was found in TRENDnet TEW-815DAP 1.0.2.0. It has been classified as critical. This affects the function dosetNTP of the component POST Request Handler. The manipulation of the argument NtpDstStart/NtpDstEnd leads to command injection. It is possible to initiate the attack remotely...

9CVSS9.1AI score0.22549EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/04 11:10 p.m.6 views

CVE-2024-0920

A vulnerability was found in TRENDnet TEW-822DRE 1.03B02. It has been declared as critical. This vulnerability affects unknown code of the file /adminping.htm of the component POST Request Handler. The manipulation of the argument ipv4ping/ipv6ping leads to command injection. The attack can be...

8.3CVSS7.5AI score0.08648EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/04 11:2 p.m.8 views

CVE-2024-0918

A vulnerability was found in TRENDnet TEW-800MB 1.0.1.0 and classified as critical. Affected by this issue is some unknown functionality of the component POST Request Handler. The manipulation of the argument DeviceURL leads to os command injection. The attack may be launched remotely. The exploi...

8.3CVSS7.4AI score0.25438EPSS
Exploits1References1
OSV
OSV
added 2025/01/27 3:15 p.m.1 views

CVE-2024-57590

TRENDnet TEW-632BRP v1.010B31 devices have an OS command injection vulnerability in the CGl interface "ntpsync.cgi",which allows remote attackers to execute arbitrary commands via parameter "ntpserver" passed to the "ntpsync.cgi" binary through a POST request...

9.8CVSS6.1AI score0.01135EPSS
Exploits0References1
NVD
NVD
added 2025/01/27 3:15 p.m.4 views

CVE-2024-57590

TRENDnet TEW-632BRP v1.010B31 devices have an OS command injection vulnerability in the CGl interface "ntpsync.cgi",which allows remote attackers to execute arbitrary commands via parameter "ntpserver" passed to the "ntpsync.cgi" binary through a POST request...

9.8CVSS0.01135EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/27 12:0 a.m.11 views

CVE-2024-57590

TRENDnet TEW-632BRP v1.010B31 devices have an OS command injection vulnerability in the CGl interface "ntpsync.cgi",which allows remote attackers to execute arbitrary commands via parameter "ntpserver" passed to the "ntpsync.cgi" binary through a POST request...

0.01135EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/27 12:0 a.m.6 views

CVE-2024-57590

TRENDnet TEW-632BRP v1.010B31 devices have an OS command injection vulnerability in the CGl interface "ntpsync.cgi",which allows remote attackers to execute arbitrary commands via parameter "ntpserver" passed to the "ntpsync.cgi" binary through a POST request...

10AI score0.01135EPSS
Exploits0References1
CVE
CVE
added 2025/01/27 12:0 a.m.45 views

CVE-2024-57590

TRENDnet TEW-632BRP v1.010B31 is affected by an OS command injection in the CGl interface ntp_sync.cgi. The vulnerability allows a remote attacker to execute arbitrary commands by sending a crafted ntp_server parameter in a POST request to ntp_sync.cgi. CVSS v3.1 base score 9.8 (CRITICAL) with Ne...

9.8CVSS8.5AI score0.01135EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2025/01/27 12:0 a.m.2 views

TRENDnet TEW-632BRP 安全漏洞

The TRENDnet TEW-632BRP is a wireless router from Trendnet, Inc. A security vulnerability exists in TRENDnet TEW-632BRP version 1.010B31, which originates from an OS command injection vulnerability in the CGl interface ntpsync.cgi, which allows remote attackers to execute arbitrary commands...

9.8CVSS8AI score0.01135EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/01/27 12:0 a.m.3 views

PT-2025-3479 · Trendnet · Trendnet Tew-632Brp

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW-632BRP version 1.010B31 Description: The issue is related to an OS command injection vulnerability in the CGl interface "ntp sync.cgi". This vulnerability allows remote attackers to execute arbitrary commands via the ntp server...

9.8CVSS8.8AI score0.01135EPSS
Exploits0References4
Rows per page
Query Builder