Command injection

An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices. OS command injection occurs through the getset.ccp lanHostCfgHostName1.1.1.0.0 parameter...

Buffer overflow

An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices. A buffer overflow occurs through the getset.ccp ccpact parameter...

CVE-2019-11400

An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices. A buffer overflow occurs through the getset.ccp ccpact parameter...

CVE-2019-11400

CVE-2019-11400 affects TRENDnet devices: TEW-651BR (2.04B1), TEW-652BRP (3.04b01), and TEW-652BRU (1.00b12). The vulnerability is a buffer overflow in the get_set.ccp parameter named “ccp_act.” This is documented across multiple sources (NVD, Red Hat, CNVD, CVE lists), indicating a memory boundar...

CVE-2019-11399

An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices. OS command injection occurs through the getset.ccp lanHostCfgHostName1.1.1.0.0 parameter...

CVE-2019-11399

The CVE-2019-11399 issue affects TRENDnet TEW-651BR (2.04B1), TEW-652BRP (3.04b01), and TEW-652BRU (1.00b12). It is an OS command injection in get_set.ccp via the lanHostCfg_HostName_1.1.1.0.0 parameter. Impact details in the provided metrics indicate high severity with potential confidentiality,...

PT-2019-12285

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-651BR version 2.04B1 TRENDnet TEW-652BRP version 3.04b01 TRENDnet TEW-652BRU version 1.00b12 Description A buffer overflow issue was discovered. The issue occurs through the ccp act parameter in the get set.ccp endpoint...

PT-2019-12284

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-651BR version 2.04B1 TRENDnet TEW-652BRP version 3.04b01 TRENDnet TEW-652BRU version 1.00b12 Description An issue was discovered that allows OS command injection through the "get set.ccp" API endpoint, specifically the lanHostCfg...

CVE-2019-11400: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices. A buffer overflow occurs through the getset.ccp ccpact parameter...

CVE-2019-11399: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices. OS command injection occurs through the getset.ccp lanHostCfgHostName1.1.1.0.0 parameter...

CVE-2013-3366

Undocumented TELNET service in TRENDnet TEW-812DRU when a web page named backdoor contains an HTML parameter of password and a value of j78G¬DFdg24Mhw3...

Hardcoded credentials

Undocumented TELNET service in TRENDnet TEW-812DRU when a web page named backdoor contains an HTML parameter of password and a value of j78G¬DFdg24Mhw3...

CVE-2013-3367

Undocumented TELNET service in TRENDnet TEW-691GR and TEW-692GR when a web page named backdoor contains an HTML parameter of password and a value of j78G¬DFdg24Mhw3...

Hardcoded credentials

Undocumented TELNET service in TRENDnet TEW-691GR and TEW-692GR when a web page named backdoor contains an HTML parameter of password and a value of j78G¬DFdg24Mhw3...

CVE-2013-3366

Undocumented TELNET service in TRENDnet TEW-812DRU when a web page named backdoor contains an HTML parameter of password and a value of j78G¬DFdg24Mhw3...

CVE-2013-3366

The CVE-2013-3366 entry concerns TRENDnet TEW-812DRU with an undocumented TELNET service that can be triggered via a web page named “backdoor” containing an HTML parameter password and a value of j78G¬DFdg_24Mhw3. This vulnerability is documented across multiple sources (NVD, CVE listings) with h...

CVE-2013-3367

Undocumented TELNET service in TRENDnet TEW-691GR and TEW-692GR when a web page named backdoor contains an HTML parameter of password and a value of j78G¬DFdg24Mhw3...

CVE-2013-3367

The CVE-2013-3367 entry concerns TRENDnet TEW-691GR and TEW-692GR devices where an undocumented TELNET service is exposed via a backdoor attack surface. A web page named backdoor can pass an HTML parameter of password with value j78G¬DFdg_24Mhw3, enabling network access with high impact to confid...

PT-2019-6914

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-691GR affected versions not specified TRENDnet TEW-692GR affected versions not specified Description The issue concerns an undocumented TELNET service. It is triggered when a specific web page named 'backdoor' contains an HTML...

PT-2019-6913

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-812DRU version affected versions not specified Description The issue concerns an undocumented TELNET service. It is triggered when a specific web page named 'backdoor' contains an HTML parameter of password with a value of j78G¬DF...