TEW-821DAP vulnerabilities
11 known vulnerabilities in TEW-821DAP from TRENDnet. 11 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 10.0 Critical severity
TEW-821DAP: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected by this vulnerability is the function uci_safe_get of the file /cgi-bin/apply_time.cgi of the component NTP Timezone Configuration Handler. Executing a manipulation of the argument syste
- 7.4 High severity
TEW-821DAP: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in TRENDnet TEW-821DAP 2.2.01b05. Affected is an unknown function of the file /cgi-bin/upload.cgi of the component ssi. Performing a manipulation of the argument filename results in command injection. The attack may be initiated remot
- 7.4 High severity
TEW-821DAP: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected is the function popen/system of the file /cgi-bin/ping.cgi of the component ssi. Executing a manipulation of the argument ipaddr can lead to command injection. It is possible to launch t
- 8.8 High severity
TEW-821DAP: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was detected in TRENDnet TEW-821DAP 1.12B01. The affected element is the function sub_41EC14 of the file /goform/tools_nslookup of the component ssi. The manipulation results in buffer overflow. It is possible to launch the attack remotely. The
- 8.8 High severity
TEW-821DAP: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the function sub_41EC14 of the file /goform/tools_nslookup of the component ssi. The manipulation of the argument nslookup_target leads to buffer overflow. It is possible to
- 8.1 High severity
TEW-821DAP: Insufficient Verification of Data Authenticity
A vulnerability was found in TRENDnet TEW-821DAP up to 1.12B01. This impacts the function platform_do_upgrade_cameo_dev of the file cameo_dev.sh of the component Firmware Update Handler. Performing a manipulation results in insufficient verification of data au
- 8.1 High severity
A vulnerability has been found in TRENDnet TEW-821DAP 1.12B01.
A vulnerability has been found in TRENDnet TEW-821DAP 1.12B01. This affects an unknown function of the file /www/cgi/ssi of the component Firmware Update. Such manipulation leads to cleartext transmission of sensitive information. The attack can be executed re
- 8.8 High severity
TEW-821DAP: Improper Neutralization of Special Elements used in a Command
A flaw has been found in TRENDnet TEW-821DAP up to 1.12B01. The impacted element is the function tools_diagnostic of the file /tmp/diagnostic of the component Firmware Udpate. This manipulation causes os command injection. Remote exploitation of the attack is
- 8.0 High severity
TEW-821DAP: Improper Neutralization of Special Elements used in a Command
A vulnerability was detected in TRENDnet TEW-821DAP up to 1.12B01. The affected element is the function tools_diagnostic. The manipulation results in os command injection. The exploit is now public and may be used. The vendor explains: "That firmware version w
- 8.8 High severity
TEW-821DAP: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the function auto_update_firmware of the component Firmware Udpate. The manipulation of the argument str leads to buffer overflow. The attack may be initiated remotely. The
- 8.1 High severity
TEW-821DAP: Insufficient Verification of Data Authenticity
A weakness has been identified in TRENDnet TEW-821DAP 1.12B01. This issue affects the function find_hwid/new_gui_update_firmware of the component Firmware Update Handler. Executing a manipulation of the argument dest can lead to insufficient verification of da