TRENDnet vulnerabilities
We track 110 vulnerabilities in TRENDnet products across 56 products. 110 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on October 13, 2026.
Latest TRENDnet vulnerabilities
- 8.8 High severity
TEW-821DAP: Improper Neutralization of Special Elements used in a Command
A flaw has been found in TRENDnet TEW-821DAP up to 1.12B01. The impacted element is the function tools_diagnostic of the file /tmp/diagnostic of the component Firmware Udpate. This manipulation causes os command injection. Remote exploitation of the attack is
- 8.0 High severity
TEW-821DAP: Improper Neutralization of Special Elements used in a Command
A vulnerability was detected in TRENDnet TEW-821DAP up to 1.12B01. The affected element is the function tools_diagnostic. The manipulation results in os command injection. The exploit is now public and may be used. The vendor explains: "That firmware version w
- 8.8 High severity
TEW-821DAP: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the function auto_update_firmware of the component Firmware Udpate. The manipulation of the argument str leads to buffer overflow. The attack may be initiated remotely. The
- 8.1 High severity
TEW-821DAP: Insufficient Verification of Data Authenticity
A weakness has been identified in TRENDnet TEW-821DAP 1.12B01. This issue affects the function find_hwid/new_gui_update_firmware of the component Firmware Update Handler. Executing a manipulation of the argument dest can lead to insufficient verification of da
- 8.8 High severity
TEW-657BRM: Improper Neutralization of Special Elements used in a Command
A vulnerability has been found in Trendnet TEW-657BRM 1.00.1. Affected by this issue is the function vpn_drop of the file /setup.cgi. The manipulation of the argument policy_name leads to os command injection. The attack is possible to be carried out remotely.
- 8.8 High severity
TEW-657BRM: Improper Neutralization of Special Elements used in a Command
A flaw has been found in Trendnet TEW-657BRM 1.00.1. Affected by this vulnerability is the function vpn_connect of the file /setup.cgi. Executing a manipulation of the argument policy_name can lead to os command injection. The attack can be executed remotely.
- 8.8 High severity
TEW-657BRM: Improper Neutralization of Special Elements used in a Command
A vulnerability was detected in Trendnet TEW-657BRM 1.00.1. Affected is the function ping_test of the file /setup.cgi. Performing a manipulation of the argument c4_IPAddr results in os command injection. Remote exploitation of the attack is possible. The explo
- 8.8 High severity
TEW-657BRM: Improper Neutralization of Special Elements used in a Command
A security vulnerability has been detected in Trendnet TEW-657BRM 1.00.1. This impacts the function Edit of the file /setup.cgi. Such manipulation of the argument pcdb_list leads to os command injection. The attack may be launched remotely. The exploit has bee
- 8.8 High severity
TEW-657BRM: Improper Neutralization of Special Elements used in a Command
A weakness has been identified in Trendnet TEW-657BRM 1.00.1. This affects the function add_wps_client of the file /setup.cgi. This manipulation of the argument wl_enrolee_pin causes os command injection. The attack may be initiated remotely. The exploit has b
- 8.8 High severity
TEW-657BRM: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security flaw has been discovered in Trendnet TEW-657BRM 1.00.1. The impacted element is the function update_pcdb of the file /setup.cgi. The manipulation of the argument mac_pc_dba results in stack-based buffer overflow. The attack can be launched remotely.
- 8.8 High severity
TEW-657BRM: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was identified in Trendnet TEW-657BRM 1.00.1. The affected element is the function add_apcdb of the file /setup.cgi. The manipulation of the argument mac_pc_dba leads to stack-based buffer overflow. The attack can be initiated remotely. The exp
- 8.8 High severity
TEW-713RE: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was identified in TRENDnet TEW-713RE up to 1.02. The impacted element is an unknown function of the file /goform/setSysAdm. The manipulation of the argument admuser leads to command injection. The attack can be initiated remotely. The exploit i
- 9.8 Critical severity
TEW-713RE: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was determined in TRENDnet TEW-713RE up to 1.02. The affected element is the function sub_421494 of the file /goform/addRouting. Executing a manipulation of the argument dest can lead to command injection. It is possible to launch the attack re
- 7.2 High severity
TEW-632BRP: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was detected in TRENDnet TEW-632BRP 1.010B32. This affects an unknown part of the file /ping_response.cgi of the component HTTP POST Request Handler. The manipulation of the argument ping_ipaddr results in stack-based buffer overflow. The attac
- 7.2 High severity
TEW-811DRU: Improper Neutralization of Special Elements used in an OS Command
A flaw has been found in TRENDnet TEW-811DRU 1.0.2.0. This affects the function setDeviceURL of the file uapply.cgi of the component httpd . This manipulation of the argument DeviceURL causes os command injection. The attack can be initiated remotely. The expl
- 9.8 Critical severity
TEW-713RE: Improper Neutralization of Special Elements used in a Command
A vulnerability was detected in TRENDnet TEW-713RE 1.02. The impacted element is an unknown function of the file /goformX/formFSrvX. The manipulation of the argument SZCMD results in os command injection. It is possible to launch the attack remotely. The explo
- 8.8 High severity
TEW-822DRE: Improper Neutralization of Special Elements used in a Command
A vulnerability has been found in TRENDnet TEW-822DRE 1.00B21/1.01B06. This affects the function sub_43ACF4 of the file /boafrm/formWsc. Such manipulation of the argument peerPin leads to command injection. The attack can be executed remotely. The exploit has
- 8.8 High severity
TEW-800MB: Improper Neutralization of Special Elements used in a Command
A vulnerability was detected in TRENDnet TEW-800MB 1.0.1.0. Affected by this vulnerability is the function sub_F934 of the file NTPSyncWithHost.cgi. The manipulation results in command injection. The attack may be launched remotely. The exploit is now public a
- 8.8 High severity
TEW-800MB: Improper Neutralization of Special Elements used in a Command
A security vulnerability has been detected in TRENDnet TEW-800MB 1.0.1.0. Affected is the function do_setWizard_asp of the file /goform/wizardset of the component Management Interface. The manipulation of the argument WizardConfigured leads to command injectio
- 8.0 High severity
Tew-657brm Firmware: Improper Neutralization of Special Elements used in an OS Command
TRENDnet TEW-657BRM 1.00.1 has an authenticated remote OS command injection vulnerability in the setup.cgi binary, exploitable via the HTTP parameters "command", "todo", and "next_file," which allows an attacker to execute arbitrary commands with root privileg
- 7.0 High severity
TEW-822DRE: Incorrect Privilege Assignment
A vulnerability was found in TRENDnet TEW-822DRE FW103B02. It has been classified as problematic. This affects an unknown part of the component vsftpd. The manipulation leads to least privilege violation. Attacking locally is a requirement. The complexity of a
- 7.0 High severity
TV-IP110WN: Incorrect Privilege Assignment
A vulnerability was found in TRENDnet TV-IP110WN 1.2.2 and classified as problematic. Affected by this issue is some unknown functionality of the file /server/boa.conf of the component Embedded Boa Web Server. The manipulation leads to least privilege violatio
- 9.8 Critical severity
TI-G160i: Use of Default Credentials
A vulnerability was identified in TRENDnet TI-G160i, TI-PG102i and TPL-430AP up to 20250724. This affects an unknown part of the component SSH Service. The manipulation leads to use of default credentials. It is possible to initiate the attack remotely. The ex
- 7.5 High severity
Tew-wlc100p Firmware: Cleartext Storage of Sensitive Information
In the configuration file of racoon in the TRENDnet TEW-WLC100P 2.03b03, the first item of exchage_mode is set to aggressive. Aggressive mode in IKE Phase 1 exposes identity information in plaintext, is vulnerable to offline dictionary attacks, and lacks flexi
- 7.5 High severity
Tpl-430ap Firmware: Uncontrolled Resource Consumption
In TRENDnet TPL-430AP FW1.0, the USERLIMIT_GLOBAL option is set to 0 in the bftpd-related configuration file. This can cause DoS attacks when unlimited users are connected.
- 7.3 High severity
Tew-wlc100p Firmware: Initialization of a Resource with an Insecure Default
In TRENDnet TEW-WLC100P 2.03b03, the i_dont_care_about_security_and_use_aggressive_mode_psk option is enabled in the strongSwan configuration file, so that IKE Responders are allowed to use IKEv1 Aggressive Mode with Pre-Shared Keys to conduct offline attacks
- 7.3 High severity
TV-IP121W: Improper Authentication
A vulnerability has been found in TRENDnet TV-IP121W 1.1.1 Build 36 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/setup.cgi of the component Web Interface. The manipulation leads to improper authentic
- 9.8 Critical severity
Tew-632brp Firmware: Improper Neutralization of Special Elements used in a Command
TRENDnet TEW-632BRP v1.010B31 devices have an OS command injection vulnerability in the CGl interface "ntp_sync.cgi",which allows remote attackers to execute arbitrary commands via parameter "ntp_server" passed to the "ntp_sync.cgi" binary through a POST reque
- 9.8 Critical severity
tew-820ap: Buffer Copy without Checking Size of Input
The boa httpd of Trendnet TEW-820AP 1.01.B01 has a stack overflow vulnerability in /boafrm/formIPv6Addr, /boafrm/formIpv6Setup, /boafrm/formDnsv6. The reason is that the check of ipv6 address is not sufficient, which allows attackers to construct payloads for
- 9.8 Critical severity
tew-752dru_firmware: Buffer Copy without Checking Size of Input
In TRENDnet TEW-752DRU FW1.03B01, there is a buffer overflow vulnerability due to the lack of length verification for the service field in gena.cgi. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute ar
- 9.1 Critical severity
Tew-814dap Firmware: Improper Neutralization of Special Elements used in a Command
TRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a command injection vulnerability via the ipv4_ping, ipv6_ping parameter at /formSystemCheck .
- 8.8 High severity
tew-814dap: Use of Hard-coded Password
TRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root.
- 8.1 High severity
tew-827dru_firmware: Stack-based Buffer Overflow
TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action vlan_setting with a sufficiently long dns1 or dns 2
- 8.0 High severity
tew-821dap_v2.0r_firmware: Stack-based Buffer Overflow
Buffer Overflow vulnerability in TRENDnet Trendnet AC1200 TEW-821DAP with firmware version 3.00b06 allows an attacker to execute arbitrary code via the adm_mod_pwd action.
- 8.0 High severity
tew-821dap_v2.0r_firmware: Stack-based Buffer Overflow
Buffer Overflow vulnerability in TRENDnet AC1200 TEW-821DAP with firmware version 3.00b06 allows an attacker to execute arbitrary code via the adm_add_user action.
- 8.0 High severity
tew-821dap_v2.0r_firmware: Stack-based Buffer Overflow
An issue in TRENDnet Trendnet AC1200 Dual Band PoE Indoor Wireless Access Point TEW-821DAP v.3.00b06 allows an attacker to execute arbitrary code via the 'mycli' command-line interface component.
- 10.0 Critical severity
tew-827dru_firmware: Improper Neutralization of Special Elements used in a Command
There is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware version 2.10B01. An attacker can inject commands into the post request parameters usapps.@smb[%d].username in the apply.cgi interface, thereby gaining root shell privile
- 8.8 High severity
tew-827dru_firmware: Improper Neutralization of Special Elements used in a Command
There is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware version 2.10B01. An attacker can inject commands into the post request parameters usapps.config.smb_admin_name in the apply.cgi interface, thereby gaining root shell pri
- 7.2 High severity
TEW-822DRE: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in TRENDnet TEW-822DRE 1.03B02. It has been declared as critical. This vulnerability affects unknown code of the file /admin_ping.htm of the component POST Request Handler. The manipulation of the argument ipv4_ping/ipv6_ping leads to
- 7.2 High severity
TEW-815DAP: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in TRENDnet TEW-815DAP 1.0.2.0. It has been classified as critical. This affects the function do_setNTP of the component POST Request Handler. The manipulation of the argument NtpDstStart/NtpDstEnd leads to command injection. It is po