Tew-432brp Firmware vulnerabilities
5 known vulnerabilities in Tew-432brp Firmware from TRENDnet. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
TEW-432BRP: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security flaw has been discovered in TRENDnet TEW-432BRP 3.10B20. This affects the function formSetPortTr of the file /goform/formSetPortTr. Performing a manipulation of the argument special_name results in stack-based buffer overflow. It is possible to init
- 9.8 Critical severity
TEW-432BRP: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was identified in TRENDnet TEW-432BRP 3.10B20. Affected by this issue is the function formWPS of the file /goform/formWPS. Such manipulation of the argument peerPin leads to stack-based buffer overflow. The attack may be performed from remote.
- 9.8 Critical severity
TEW-432BRP: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was determined in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formSetRoute of the file /goform/formSetRoute. This manipulation of the argument ip/mask/gateway causes stack-based buffer overflow. The attack is pos
- 9.8 Critical severity
TEW-432BRP: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected is the function formWPS of the file /goform/formWPS. The manipulation of the argument peerPin results in command injection. The attack can be executed remotely. The exploit has been made public
- 9.8 Critical severity
TEW-432BRP: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability has been found in TRENDnet TEW-432BRP 3.10B20. This impacts the function formSetRoute of the file /goform/formSetRoute. The manipulation of the argument ip/mask/gateway leads to command injection. Remote exploitation of the attack is possible.