CVE-2013-3367

The CVE-2013-3367 entry concerns TRENDnet TEW-691GR and TEW-692GR devices where an undocumented TELNET service is exposed via a backdoor attack surface. A web page named backdoor can pass an HTML parameter of password with value j78G¬DFdg_24Mhw3, enabling network access with high impact to confid...

PT-2019-6913

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-812DRU version affected versions not specified Description The issue concerns an undocumented TELNET service. It is triggered when a specific web page named 'backdoor' contains an HTML parameter of password with a value of j78G¬DF...

CVE-2013-3367: Improper Authentication

Undocumented TELNET service in TRENDnet TEW-691GR and TEW-692GR when a web page named backdoor contains an HTML parameter of password and a value of j78G¬DFdg24Mhw3...

CVE-2013-3366: Cross-Site Request Forgery (CSRF)

Undocumented TELNET service in TRENDnet TEW-812DRU when a web page named backdoor contains an HTML parameter of password and a value of j78G¬DFdg24Mhw3...

PT-2019-6914

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-691GR affected versions not specified TRENDnet TEW-692GR affected versions not specified Description The issue concerns an undocumented TELNET service. It is triggered when a specific web page named 'backdoor' contains an HTML...

Trendnet Controller Asset Information

This plugin returns asset information for a Trendnet controller. File data ot500017.nasl...

TRENDnet TEW-827DRU Stack Buffer Overflow Vulnerability

The TRENDnet TEW-827DRU is a wireless router from TRENDnet. A buffer overflow vulnerability exists in the TRENDnet TEW-827DRU using firmware version 2.04B03 and earlier. The vulnerability originates when a network system or product performs an operation on memory without properly validating data...

TRENDnet TEW-827DRU Stack Buffer Overflow Vulnerability (CNVD-2019-22208)

The TRENDnet TEW-827DRU is a wireless router from TRENDnet. A buffer overflow vulnerability exists in the ssi binary in the TRENDnet TEW-827DRU using firmware version 2.04B03 and earlier. The vulnerability originates when a network system or product performs an operation on memory without properl...

TRENDnet TEW-827DRU Command Injection Vulnerability (CNVD-2019-22209)

The TRENDnet TEW-827DRU is a wireless router from TRENDnet. A security vulnerability exists in the TRENDnet TEW-827DRU using firmware version 2.04B03 and earlier. An attacker can exploit the vulnerability to execute arbitrary commands on the device...

CVE-2019-13279

TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains multiple stack-based buffer overflows when processing user input for the setup wizard, allowing an unauthenticated user to execute arbitrary code. The vulnerability can be exercised on the local intranet or remotely if remote...

CVE-2019-13276

TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains a stack-based buffer overflow in the ssi binary. The overflow allows an unauthenticated user to execute arbitrary code by providing a sufficiently long query string when POSTing to any valid cgi, txt, asp, or js file. The...

CVE-2019-13278

TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains multiple command injections when processing user input for the setup wizard, allowing an unauthenticated user to run arbitrary commands on the device. The vulnerability can be exercised on the local intranet or remotely if...

CVE-2019-13278

TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains multiple command injections when processing user input for the setup wizard, allowing an unauthenticated user to run arbitrary commands on the device. The vulnerability can be exercised on the local intranet or remotely if...

CVE-2019-13276

TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains a stack-based buffer overflow in the ssi binary. The overflow allows an unauthenticated user to execute arbitrary code by providing a sufficiently long query string when POSTing to any valid cgi, txt, asp, or js file. The...

CVE-2019-13279

TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains multiple stack-based buffer overflows when processing user input for the setup wizard, allowing an unauthenticated user to execute arbitrary code. The vulnerability can be exercised on the local intranet or remotely if remote...

Stack overflow

TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains a stack-based buffer overflow in the ssi binary. The overflow allows an unauthenticated user to execute arbitrary code by providing a sufficiently long query string when POSTing to any valid cgi, txt, asp, or js file. The...

Stack overflow

TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains multiple stack-based buffer overflows when processing user input for the setup wizard, allowing an unauthenticated user to execute arbitrary code. The vulnerability can be exercised on the local intranet or remotely if remote...

Command injection

TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains multiple command injections when processing user input for the setup wizard, allowing an unauthenticated user to run arbitrary commands on the device. The vulnerability can be exercised on the local intranet or remotely if...

CVE-2019-13279

TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains multiple stack-based buffer overflows when processing user input for the setup wizard, allowing an unauthenticated user to execute arbitrary code. The vulnerability can be exercised on the local intranet or remotely if remote...

CVE-2019-13279

TRENDnet TEW-827DRU devices running firmware up to and including 2.04B03 are affected by multiple stack-based buffer overflows in the setup wizard input processing. This vulnerability allows an unauthenticated attacker to execute arbitrary code and can be exploited from the local intranet or remo...