TRENDnet vulnerabilities
We track 110 vulnerabilities in TRENDnet products across 56 products. 110 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on October 13, 2026.
Latest TRENDnet vulnerabilities
- 9.9 Critical severity
TEW-432BRP: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formTcpipSetup of the file /goform/formTcpipSetup. Performing a manipulation of the argument Name results in stack-based buffer overflow. It is possible to
- 10.0 Critical severity
TEW-751DR: Improper Neutralization of Special Elements used in a Command
A vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW733GR 1.03B01/1.03B03. Affected is the function fwrite of the file pigwidgeon.cgi of the component Web Management Backend. The manipulation of the argument service results in os command inje
- 10.0 Critical severity
TEW-821DAP: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected by this vulnerability is the function uci_safe_get of the file /cgi-bin/apply_time.cgi of the component NTP Timezone Configuration Handler. Executing a manipulation of the argument syste
- 7.4 High severity
TEW-821DAP: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in TRENDnet TEW-821DAP 2.2.01b05. Affected is an unknown function of the file /cgi-bin/upload.cgi of the component ssi. Performing a manipulation of the argument filename results in command injection. The attack may be initiated remot
- 7.4 High severity
TEW-755AP: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security flaw has been discovered in TRENDnet TEW-755AP up to 20260702. This affects the function log_email_server of the file /cgi-bin/email.cgi of the component ssi. Performing a manipulation results in command injection. The attack is possible to be carri
- 9.9 Critical severity
TEW-755AP: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was identified in TRENDnet TEW-755AP up to 20260702. Affected by this issue is some unknown functionality of the file /cgi-bin/wan.cgi of the component ssi. Such manipulation of the argument cameo.wan.wan_pppoe_password_00 leads to stack-based
- 9.9 Critical severity
TEW-755AP: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was found in TRENDnet TEW-755AP up to 20260702. Affected is the function FUN_401000 of the file /sbin/mycli. The manipulation of the argument ssid results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been
- 9.9 Critical severity
TV-IP751WIC: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/set_time.cgi of the component alphapd. The manipulation of the argument Currenttime results in stack-based buf
- 7.4 High severity
TV-IP751WIC: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was identified in TRENDnet TV-IP751WIC 11.03.03. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/admin/set_time.cgi of the component alphapd. The manipulation leads to command injection. The attack can be initiat
- 7.4 High severity
TEW-821DAP: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected is the function popen/system of the file /cgi-bin/ping.cgi of the component ssi. Executing a manipulation of the argument ipaddr can lead to command injection. It is possible to launch t
- 7.4 High severity
Router: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A flaw has been found in TRENDnet Router 1.1.02b01. The affected element is an unknown function of the file /cgi-bin/ping.cgi. This manipulation of the argument wan_type causes command injection. The attack may be initiated remotely. The exploit has been publi
- 7.4 High severity
TEW-823DRU: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was detected in TRENDnet TEW-823DRU 1.1.02b01. Impacted is an unknown function of the file /cgi-bin/admin.cgi. The manipulation of the argument Hostname results in command injection. The attack can be launched remotely. The exploit is now publi
- 9.9 Critical severity
TEW-823DRU: Improper Restriction of Operations within the Bounds of a Memory Buffer
A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the function strcpy of the file /cgi-bin/wan.cgi of the component NVRAM. This manipulation of the argument wan_l2tp_password causes stack-based buffer overflow. The attack can be init
- 9.9 Critical severity
TV-IP751WIC: Improper Restriction of Operations within the Bounds of a Memory Buffer
A flaw has been found in TRENDnet TV-IP751WIC 11.03.03. This vulnerability affects the function SystemNetworkChanged/SystemDDNSChanged/SystemEmailChanged/SystemFTPChanged/websCheckRealm/FUN_00432574/FUN_0043372C of the component alphapd. Executing a manipulati
- 10.0 Critical severity
TEW-WLC100: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was detected in TRENDnet TEW-WLC100 1v2.07b01. Affected by this issue is the function FUN_0040da4c of the file /usr/nginx/sbin/nginx of the component HTTP Header Handler. The manipulation of the argument Server results in stack-based buffer ove
- 9.6 Critical severity
TEW-WLC100P: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security vulnerability has been detected in TRENDnet TEW-WLC100P 12.07b01. Affected by this vulnerability is an unknown functionality of the file /sbin/netifd of the component DHCP blobmsg Handler. The manipulation leads to stack-based buffer overflow. The a
- 8.8 High severity
TEW-821DAP: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was detected in TRENDnet TEW-821DAP 1.12B01. The affected element is the function sub_41EC14 of the file /goform/tools_nslookup of the component ssi. The manipulation results in buffer overflow. It is possible to launch the attack remotely. The
- 8.8 High severity
TEW-821DAP: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the function sub_41EC14 of the file /goform/tools_nslookup of the component ssi. The manipulation of the argument nslookup_target leads to buffer overflow. It is possible to
- 8.8 High severity
TEW-635BRM: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security flaw has been discovered in Trendnet TEW-635BRM up to 1.00.03. This vulnerability affects the function ipoa_test of the file /sbin/rc of the component IPoA WAN Connection Setup. Performing a manipulation of the argument ipoa_ipaddr results in comman
- 8.8 High severity
TEW-635BRM: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was identified in Trendnet TEW-635BRM up to 1.00.03. This affects the function start_httpd of the file /sbin/rc of the component Web Service. Such manipulation of the argument device_name leads to stack-based buffer overflow. The attack can be
- 8.8 High severity
TEW-432BRP: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was identified in TRENDnet TEW-432BRP 3.10B20. This affects the function formWlanSetup of the file /goform/formWlanSetup. The manipulation of the argument enrollee leads to stack-based buffer overflow. The attack may be initiated remotely. The
- 8.8 High severity
TEW-432BRP: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. The affected element is the function formSysCmd of the file /goform/formSysCmd. Performing a manipulation of the argument submit-url results in stack-based buffer overflow. The attack can be initiated r
- 8.8 High severity
TEW-432BRP: Improper Restriction of Operations within the Bounds of a Memory Buffer
A flaw has been found in TRENDnet TEW-432BRP 3.10B20. This issue affects the function formSetWlanEncrypt of the file /goform/formSetWlanEncrypt. This manipulation of the argument webpage causes stack-based buffer overflow. It is possible to initiate the attack
- 8.8 High severity
TEW-432BRP: Improper Restriction of Operations within the Bounds of a Memory Buffer
A flaw has been found in TRENDnet TEW-432BRP 3.10B20. This vulnerability affects the function formSetPassword of the file /goform/formSetPassword. Executing a manipulation of the argument webpage can lead to stack-based buffer overflow. The attack may be launc
- 8.8 High severity
TEW-432BRP: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was detected in TRENDnet TEW-432BRP 3.10B20. This affects the function formResetStatistic of the file /goform/formResetStatistic. Performing a manipulation of the argument status_statistic results in stack-based buffer overflow. The attack may
- 8.8 High severity
TEW-432BRP: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security vulnerability has been detected in TRENDnet TEW-432BRP 3.10B20. Affected by this issue is the function formSetEnableWizard of the file /goform/formSetEnableWizard. Such manipulation of the argument start_wizard leads to stack-based buffer overflow.
- 8.8 High severity
TEW-432BRP: Improper Restriction of Operations within the Bounds of a Memory Buffer
A weakness has been identified in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formSysLog of the file /goform/formSysLog. This manipulation of the argument current_page causes stack-based buffer overflow. The attack can be initia
- 8.8 High severity
TEW-432BRP: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security flaw has been discovered in TRENDnet TEW-432BRP 3.10B20. Affected is the function formPortFw of the file /goform/formPortFw. The manipulation of the argument server_name results in stack-based buffer overflow. It is possible to launch the attack rem
- 8.8 High severity
TEW-432BRP: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. This impacts the function formSetDomainFilter of the file /goform/formSetDomainFilter. Performing a manipulation of the argument blocked_domain/permitted_domain/blocked_domain_list/permitted_domain_list
- 8.8 High severity
TEW-432BRP: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability has been found in TRENDnet TEW-432BRP 3.10B20. This affects the function formSetProtocolFilter of the file /goform/formSetProtocolFilter. Such manipulation of the argument protocol_name leads to stack-based buffer overflow. The attack may be pe
- 8.8 High severity
TEW-432BRP: Improper Restriction of Operations within the Bounds of a Memory Buffer
A flaw has been found in TRENDnet TEW-432BRP 3.10B20. The impacted element is the function formSetUrlFilter of the file /goform/formSetUrlFilter. This manipulation of the argument keyword_list/keyword causes stack-based buffer overflow. The attack is possible
- 8.8 High severity
TEW-432BRP: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was detected in TRENDnet TEW-432BRP 3.10B20. The affected element is the function formSetFirewallRule of the file /goform/formSetFirewallRule. The manipulation of the argument firewall_name results in stack-based buffer overflow. The attack can
- 8.8 High severity
TEW-432BRP: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security vulnerability has been detected in TRENDnet TEW-432BRP 3.10B20. Impacted is the function formSetMACFilter of the file /goform/formSetMACFilter. The manipulation of the argument filter_name leads to stack-based buffer overflow. Remote exploitation of
- 9.8 Critical severity
TEW-432BRP: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security flaw has been discovered in TRENDnet TEW-432BRP 3.10B20. This affects the function formSetPortTr of the file /goform/formSetPortTr. Performing a manipulation of the argument special_name results in stack-based buffer overflow. It is possible to init
- 9.8 Critical severity
TEW-432BRP: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was identified in TRENDnet TEW-432BRP 3.10B20. Affected by this issue is the function formWPS of the file /goform/formWPS. Such manipulation of the argument peerPin leads to stack-based buffer overflow. The attack may be performed from remote.
- 9.8 Critical severity
TEW-432BRP: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was determined in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formSetRoute of the file /goform/formSetRoute. This manipulation of the argument ip/mask/gateway causes stack-based buffer overflow. The attack is pos
- 9.8 Critical severity
TEW-432BRP: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected is the function formWPS of the file /goform/formWPS. The manipulation of the argument peerPin results in command injection. The attack can be executed remotely. The exploit has been made public
- 9.8 Critical severity
TEW-432BRP: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability has been found in TRENDnet TEW-432BRP 3.10B20. This impacts the function formSetRoute of the file /goform/formSetRoute. The manipulation of the argument ip/mask/gateway leads to command injection. Remote exploitation of the attack is possible.
- 8.1 High severity
TEW-821DAP: Insufficient Verification of Data Authenticity
A vulnerability was found in TRENDnet TEW-821DAP up to 1.12B01. This impacts the function platform_do_upgrade_cameo_dev of the file cameo_dev.sh of the component Firmware Update Handler. Performing a manipulation results in insufficient verification of data au
- 8.1 High severity
A vulnerability has been found in TRENDnet TEW-821DAP 1.12B01.
A vulnerability has been found in TRENDnet TEW-821DAP 1.12B01. This affects an unknown function of the file /www/cgi/ssi of the component Firmware Update. Such manipulation leads to cleartext transmission of sensitive information. The attack can be executed re