Tew-657brm Firmware vulnerabilities
8 known vulnerabilities in Tew-657brm Firmware from TRENDnet. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
TEW-657BRM: Improper Neutralization of Special Elements used in a Command
A vulnerability has been found in Trendnet TEW-657BRM 1.00.1. Affected by this issue is the function vpn_drop of the file /setup.cgi. The manipulation of the argument policy_name leads to os command injection. The attack is possible to be carried out remotely.
- 8.8 High severity
TEW-657BRM: Improper Neutralization of Special Elements used in a Command
A flaw has been found in Trendnet TEW-657BRM 1.00.1. Affected by this vulnerability is the function vpn_connect of the file /setup.cgi. Executing a manipulation of the argument policy_name can lead to os command injection. The attack can be executed remotely.
- 8.8 High severity
TEW-657BRM: Improper Neutralization of Special Elements used in a Command
A vulnerability was detected in Trendnet TEW-657BRM 1.00.1. Affected is the function ping_test of the file /setup.cgi. Performing a manipulation of the argument c4_IPAddr results in os command injection. Remote exploitation of the attack is possible. The explo
- 8.8 High severity
TEW-657BRM: Improper Neutralization of Special Elements used in a Command
A security vulnerability has been detected in Trendnet TEW-657BRM 1.00.1. This impacts the function Edit of the file /setup.cgi. Such manipulation of the argument pcdb_list leads to os command injection. The attack may be launched remotely. The exploit has bee
- 8.8 High severity
TEW-657BRM: Improper Neutralization of Special Elements used in a Command
A weakness has been identified in Trendnet TEW-657BRM 1.00.1. This affects the function add_wps_client of the file /setup.cgi. This manipulation of the argument wl_enrolee_pin causes os command injection. The attack may be initiated remotely. The exploit has b
- 8.8 High severity
TEW-657BRM: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security flaw has been discovered in Trendnet TEW-657BRM 1.00.1. The impacted element is the function update_pcdb of the file /setup.cgi. The manipulation of the argument mac_pc_dba results in stack-based buffer overflow. The attack can be launched remotely.
- 8.8 High severity
TEW-657BRM: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was identified in Trendnet TEW-657BRM 1.00.1. The affected element is the function add_apcdb of the file /setup.cgi. The manipulation of the argument mac_pc_dba leads to stack-based buffer overflow. The attack can be initiated remotely. The exp
- 8.0 High severity
Tew-657brm Firmware: Improper Neutralization of Special Elements used in an OS Command
TRENDnet TEW-657BRM 1.00.1 has an authenticated remote OS command injection vulnerability in the setup.cgi binary, exploitable via the HTTP parameters "command", "todo", and "next_file," which allows an attacker to execute arbitrary commands with root privileg