62924 matches found
PT-2026-36586
Name of the Vulnerable Software and Affected Versions TRENDnet TEW-821DAP version 1.12B01 Description A buffer overflow exists in the Firmware Update component. A remote attacker can trigger this issue by manipulating the str argument passed to the auto update firmware function. Recommendations A...
PT-2026-36602
Name of the Vulnerable Software and Affected Versions TRENDnet TEW-821DAP version 1.12B01 Description An issue exists in the Firmware Update component within the '/www/cgi/ssi' file. This flaw allows for the remote cleartext transmission of sensitive information. The attack is characterized by hi...
CVE-2026-7611: Insufficient Verification of Data Authenticity
A vulnerability was found in TRENDnet TEW-821DAP up to 1.12B01. This impacts the function platformdoupgradecameodev of the file cameodev.sh of the component Firmware Update Handler. Performing a manipulation results in insufficient verification of data authenticity. The attack is possible to be...
CVE-2026-7610: Cleartext Transmission of Sensitive Information
A vulnerability has been found in TRENDnet TEW-821DAP 1.12B01. This affects an unknown function of the file /www/cgi/ssi of the component Firmware Update. Such manipulation leads to cleartext transmission of sensitive information. The attack can be executed remotely. This attack is characterized ...
CVE-2026-7609: Improper Neutralization of Special Elements used in an OS Command
A flaw has been found in TRENDnet TEW-821DAP up to 1.12B01. The impacted element is the function toolsdiagnostic of the file /tmp/diagnostic of the component Firmware Udpate. This manipulation causes os command injection. Remote exploitation of the attack is possible. The exploit has been publish...
CVE-2026-7608: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was detected in TRENDnet TEW-821DAP up to 1.12B01. The affected element is the function toolsdiagnostic. The manipulation results in os command injection. The exploit is now public and may be used. The vendor explains: "That firmware version will only work on our hardware version...
CVE-2026-7606: Insufficient Verification of Data Authenticity
A weakness has been identified in TRENDnet TEW-821DAP 1.12B01. This issue affects the function findhwid/newguiupdatefirmware of the component Firmware Update Handler. Executing a manipulation of the argument dest can lead to insufficient verification of data authenticity. The attack can be launch...
TRENDnet TEW-821DAP 缓冲区错误漏洞
The TRENDnet TEW-821DAP is a wireless access point produced by the TRENDnet company. The version TRENDnet TEW-821DAP 1.12B01 contains a buffer error vulnerability. This vulnerability stems from improper handling of the parameter str in the autoupdatefirmware function within the Firmware Update...
TRENDnet TEW-821DAP 数据伪造问题漏洞
TRENDnet TEW-821DAP is a wireless access point from the company TRENDnet. The version TRENDnet TEW-821DAP 1.12B01 has a vulnerability related to data falsification. This vulnerability stems from improper handling of the parameter dest in the findHWid/newGuiUpdateFirmware function within the...
TRENDnet TEW-821DAP 命令注入漏洞
TRENDnet TEW-821DAP is a wireless access point from the company TRENDnet. Versions of TRENDnet TEW-821DAP prior to 1.12B01 contained a command injection vulnerability. This vulnerability stemmed from improper handling of the toolsdiagnostic function in the Firmware Update component, which could...
TRENDnet TEW-821DAP 加密问题漏洞
The TRENDnet TEW-821DAP is a wireless access point produced by the TRENDnet company. The version TRENDnet TEW-821DAP 1.12B01 has a security vulnerability. This vulnerability stems from improper handling of functions in the Firmware Update component’s files/www/cgi/ssi, which may lead to the...
TRENDnet TEW-821DAP 数据伪造问题漏洞
TRENDnet TEW-821DAP is a wireless access point from the company TRENDnet. Versions of TRENDnet TEW-821DAP prior to 1.12B01 contained a data falsification vulnerability. This vulnerability stems from insufficient validation of data authenticity in the platformdoupgradecameodev function within the...
Linux Distros Unpatched Vulnerability : CVE-2026-31698
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed When retrieving the PDH cert, don't attempt to copy the blobs to userspace if the...
CVE-2026-7607: Buffer Copy without Checking Size of Input
A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the function autoupdatefirmware of the component Firmware Udpate. The manipulation of the argument str leads to buffer overflow. The attack may be initiated remotely. The vendor explains: "That firmware version...
Linux Distros Unpatched Vulnerability : CVE-2026-31699
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed When retrieving the PEK CSR, don't attempt to copy the blob to userspace if the firmwa...
PT-2026-36601
Name of the Vulnerable Software and Affected Versions TRENDnet TEW-821DAP versions prior to 1.12B01 Description A flaw in the Firmware Update component allows remote OS command injection. The issue exists within the tools diagnostic function located in the /tmp/diagnostic file. This allows a remo...
CVE-2026-31748
A flaw was found in the Linux kernel's comedi: medaq module. The me2600xilinxdownload function, responsible for loading firmware, does not adequately validate the length of the provided firmware data stream. This vulnerability allows for a buffer overrun, which can lead to memory corruption withi...
CVE-2026-31747
A flaw was found in the Linux kernel's comedi: me4000 driver. The me4000xilinxdownload function fails to validate the length of the firmware data stream, trusting the value provided in the firmware header. A local attacker could exploit this by providing a specially crafted firmware image, leadin...
CVE-2026-31697
A flaw was found in the Linux kernel's crypto: ccp driver. A local user could exploit this vulnerability by attempting to retrieve the CPU ID when a firmware command fails due to an invalid length. This can cause an overflow of a kernel-allocated buffer, leading to the disclosure of sensitive...
