Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
TrendnetTew-827dru Firmware

13 matches found

CVE
CVE•added 2019/07/09 9:15 p.m.•119 views

CVE-2019-13277

TRENDnet TEW-827DRU with firmware up to and including 2.04B03 allows an unauthenticated attacker to execute setup wizard functionality, giving this attacker the ability to change configuration values, potentially leading to a denial of service. The request can be made on the local intranet or remot...

7.5CVSS7.6AI score0.01701EPSS
CVE
CVE•added 2019/07/10 5:15 p.m.•96 views

CVE-2019-13278

TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains multiple command injections when processing user input for the setup wizard, allowing an unauthenticated user to run arbitrary commands on the device. The vulnerability can be exercised on the local intranet or remotely if remot...

10CVSS9.5AI score0.60719EPSS
CVE
CVE•added 2019/07/09 7:15 p.m.•96 views

CVE-2019-13280

TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains a stack-based buffer overflow while returning an error message to the user about failure to resolve a hostname during a ping or traceroute attempt. This allows an authenticated user to execute arbitrary code. The exploit can be ...

8.8CVSS8.9AI score0.02489EPSS
CVE
CVE•added 2019/07/10 5:15 p.m.•90 views

CVE-2019-13276

TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains a stack-based buffer overflow in the ssi binary. The overflow allows an unauthenticated user to execute arbitrary code by providing a sufficiently long query string when POSTing to any valid cgi, txt, asp, or js file. The vulner...

9.8CVSS9.6AI score0.0391EPSS
CVE
CVE•added 2019/07/02 1:15 p.m.•64 views

CVE-2019-13150

An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (exploitable with authentication). The command injection exists in the key ip_addr.

8.8CVSS8.9AI score0.04844EPSS
CVE
CVE•added 2019/07/02 1:15 p.m.•57 views

CVE-2019-13154

An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (exploitable with authentication) via the TCP Ports To Open in Add Gaming Rule.

8.8CVSS8.9AI score0.04844EPSS
CVE
CVE•added 2019/07/02 1:15 p.m.•54 views

CVE-2019-13149

An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (exploitable with authentication) via the key passwd in Routing RIP Settings.

8.8CVSS8.9AI score0.04844EPSS
CVE
CVE•added 2019/07/10 5:15 p.m.•54 views

CVE-2019-13279

TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains multiple stack-based buffer overflows when processing user input for the setup wizard, allowing an unauthenticated user to execute arbitrary code. The vulnerability can be exercised on the local intranet or remotely if remote ad...

9.8CVSS9.6AI score0.05217EPSS
CVE
CVE•added 2019/07/02 1:15 p.m.•52 views

CVE-2019-13152

An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (exploitable with authentication) via the IP Address in Add Gaming Rule.

8.8CVSS8.9AI score0.04844EPSS
CVE
CVE•added 2019/07/02 1:15 p.m.•51 views

CVE-2019-13148

An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (exploitable with authentication) via the UDP Ports To Open in Add Gaming Rule.

8.8CVSS8.9AI score0.04844EPSS
CVE
CVE•added 2019/07/02 1:15 p.m.•50 views

CVE-2019-13151

An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (exploitable with authentication) via the action set_sta_enrollee_pin_5g and the key wps_sta_enrollee_pin.

8.8CVSS8.9AI score0.04844EPSS
CVE
CVE•added 2019/07/02 1:15 p.m.•50 views

CVE-2019-13155

An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (exploitable with authentication) via the IP Address in Add Virtual Server.

8.8CVSS8.9AI score0.04844EPSS
CVE
CVE•added 2019/07/02 1:15 p.m.•48 views

CVE-2019-13153

An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (exploitable with authentication) via the Private Port in Add Virtual Server.

8.8CVSS8.8AI score0.04844EPSS