15 matches found
CVE-2024-22546
TRENDnet TEW-815DAP 1.0.2.0 is vulnerable to Command Injection via the dosetNTP function. An authenticated attacker with administrator privileges can leverage this vulnerability over the network via a malicious POST request...
CVE-2024-0919
A vulnerability was found in TRENDnet TEW-815DAP 1.0.2.0. It has been classified as critical. This affects the function dosetNTP of the component POST Request Handler. The manipulation of the argument NtpDstStart/NtpDstEnd leads to command injection. It is possible to initiate the attack remotely...
CVE-2024-22546
TRENDnet TEW-815DAP 1.0.2.0 is vulnerable to Command Injection via the dosetNTP function. An authenticated attacker with administrator privileges can leverage this vulnerability over the network via a malicious POST request...
CVE-2024-22546
TRENDnet TEW-815DAP 1.0.2.0 is vulnerable to Command Injection via the dosetNTP function. An authenticated attacker with administrator privileges can leverage this vulnerability over the network via a malicious POST request...
TRENDnet TEW-815DAP 安全漏洞
The TRENDnet TEW-815DAP is a wireless access point from Trendnet, Inc. A security vulnerability exists in TRENDnet TEW-815DAP version 1.0.2. that originates from an easy command injection attack via the dosetNTP function...
CVE-2024-22546
TRENDnet TEW-815DAP 1.0.2.0 is vulnerable to Command Injection via the dosetNTP function. An authenticated attacker with administrator privileges can leverage this vulnerability over the network via a malicious POST request...
CVE-2024-22546
Affected product: TRENDnet TEW-815DAP, v1.0.2.0. Vulnerability: Command Injection via the do_setNTP function. Root cause / vector: An authenticated administrator can trigger a network-accessible command injection by sending a malicious POST request to the device. Impact (as stated): Potential for...
CVE-2024-22546
TRENDnet TEW-815DAP 1.0.2.0 is vulnerable to Command Injection via the dosetNTP function. An authenticated attacker with administrator privileges can leverage this vulnerability over the network via a malicious POST request...
CVE-2024-0919
A vulnerability was found in TRENDnet TEW-815DAP 1.0.2.0. It has been classified as critical. This affects the function dosetNTP of the component POST Request Handler. The manipulation of the argument NtpDstStart/NtpDstEnd leads to command injection. It is possible to initiate the attack remotely...
CVE-2024-0919
A vulnerability was found in TRENDnet TEW-815DAP 1.0.2.0. It has been classified as critical. This affects the function dosetNTP of the component POST Request Handler. The manipulation of the argument NtpDstStart/NtpDstEnd leads to command injection. It is possible to initiate the attack remotely...
CVE-2024-0919 TRENDnet TEW-815DAP POST Request do_setNTP command injection
A vulnerability was found in TRENDnet TEW-815DAP 1.0.2.0. It has been classified as critical. This affects the function dosetNTP of the component POST Request Handler. The manipulation of the argument NtpDstStart/NtpDstEnd leads to command injection. It is possible to initiate the attack remotely...
CVE-2024-0919 TRENDnet TEW-815DAP POST Request do_setNTP command injection
A vulnerability was found in TRENDnet TEW-815DAP 1.0.2.0. It has been classified as critical. This affects the function dosetNTP of the component POST Request Handler. The manipulation of the argument NtpDstStart/NtpDstEnd leads to command injection. It is possible to initiate the attack remotely...
CVE-2024-0919
CVE-2024-0919 affects TRENDnet TEW-815DAP v1.0.2.0. The vulnerability resides in the POST Request Handler’s do_setNTP function; manipulation of the NtpDstStart/NtpDstEnd parameters enables remote command injection. Public exploit exists. Impact is described as critical. Interim mitigations from P...
TRENDnet TEW-815DAP Command Injection Vulnerability
The TRENDnet TEW-815DAP is a wireless access point from Trendnet, Inc. A command injection vulnerability exists in the TRENDnet TEW-815DAP version 1.0.2.0, which stems from the fact that incorrect operation of the parameters NtpDstStart/NtpDstEnd can lead to command injection...
PT-2024-1398 · Trendnet · Trendnet Tew-815Dap
Name of the Vulnerable Software and Affected Versions: TRENDnet TEW-815DAP version 1.0.2.0 Description: A critical issue affects the do setNTP function of the POST Request Handler component. The manipulation of the NtpDstStart/NtpDstEnd argument leads to command injection, allowing remote attacke...