TRENDnet vulnerabilities
We track 110 vulnerabilities in TRENDnet products across 56 products. 110 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on October 13, 2026.
Latest TRENDnet vulnerabilities
- 7.2 High severity
TEW-800MB: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in TRENDnet TEW-800MB 1.0.1.0 and classified as critical. Affected by this issue is some unknown functionality of the component POST Request Handler. The manipulation of the argument DeviceURL leads to os command injection. The attack
- 7.8 High severity
Tew-824dru Firmware: Improper Neutralization of Special Elements used in a Command
An issue was discovered in TRENDnet TEW-824DRU version 1.04b01, allows unauthenticated attackers to execute arbitrary code via the system.ntp.server parameter in the sub_420AE0() function. The attack can be launched remotely.
- 8.1 High severity
Tew-411brpplus Firmware: Improper Neutralization of Special Elements used in a Command
A command injection issue in TRENDnet TEW-411BRPplus v.2.07_eu that allows a local attacker to execute arbitrary code via the data1 parameter in the debug.cgi page.
- 9.8 Critical severity
Tv-ip1314pi Firmware: Improper Neutralization of Special Elements used in a Command
An issue was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices. Command injection can occur because the system function is used by davinci to unpack language packs without strict filtering of URL strings.
- 9.8 Critical severity
Tv-ip1314pi Firmware: Out-of-bounds Write
A stack-based buffer overflow was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices, leading to arbitrary command execution. This occurs because of lack of length validation during an sscanf of a user-entered scale field in the RTSP playback function of
- 9.8 Critical severity
Tv-ip1314pi Firmware: Improper Neutralization of Special Elements used in an OS Command
An issue was discovered in libremote_dbg.so on TRENDnet TV-IP1314PI 5.5.3 200714 devices. Filtering of debug information is mishandled during use of popen. Consequently, an attacker can bypass validation and execute a shell command.
- 9.8 Critical severity
TEW-652BRP: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in TRENDnet TEW-652BRP 3.04b01. It has been classified as critical. Affected is an unknown function of the file ping.ccp of the component Web Interface. The manipulation leads to command injection. It is possible to launch the attack
- 9.8 Critical severity
TEW-811DRU: Improper Neutralization of Special Elements used in a Command
A vulnerability has been found in TRENDnet TEW-811DRU 1.0.10.0 and classified as critical. This vulnerability affects unknown code of the component Web Interface. The manipulation leads to command injection. The attack can be initiated remotely. The exploit ha
- 7.5 High severity
TEW-652BRP: Out-of-bounds Write
A vulnerability was found in TRENDnet TEW-652BRP 3.04B01. It has been declared as critical. This vulnerability affects unknown code of the file cfg_op.ccp of the component Web Service. The manipulation leads to memory corruption. The attack can be initiated re
- 7.5 High severity
TEW-811DRU: Buffer Copy without Checking Size of Input
A vulnerability was found in TRENDNet TEW-811DRU 1.0.10.0. It has been classified as critical. This affects an unknown part of the file /wireless/guestnetwork.asp of the component httpd. The manipulation leads to buffer overflow. It is possible to initiate the
- 7.5 High severity
TEW-811DRU: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability has been found in TRENDnet TEW-811DRU 1.0.10.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /wireless/security.asp of the component httpd. The manipulation leads to memory corruption. The at
- 7.5 High severity
TEW-811DRU: Buffer Copy without Checking Size of Input
A vulnerability, which was classified as critical, was found in TRENDnet TEW-811DRU 1.0.10.0. Affected is an unknown function of the file /wireless/basic.asp of the component httpd. The manipulation leads to buffer overflow. It is possible to launch the attack
- 8.8 High severity
TEW-652BRP: Improper Neutralization of Special Elements used in a Command
A vulnerability, which was classified as critical, has been found in TRENDnet TEW-652BRP 3.04B01. This issue affects some unknown processing of the file get_set.ccp of the component Web Management Interface. The manipulation leads to command injection. The att
- 8.8 High severity
tew-820ap_firmware: Out-of-bounds Write
TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the username parameter at /formWizardPassword. This vulnerability allows attackers to execute arbitrary code via a crafted payload. NOT
- 8.8 High severity
Tew-820ap Firmware: Out-of-bounds Write
TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the submit-url parameter at /formSysLog. This vulnerability allows attackers to execute arbitrary code via a crafted payload. NOTE: Thi
- 8.8 High severity
Tew-820ap Firmware: Out-of-bounds Write
TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the submit-url parameter at /formPasswordAuth. This vulnerability allows attackers to execute arbitrary code via a crafted payload. NOT
- 8.8 High severity
Tew-820ap Firmware: Out-of-bounds Write
TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the newpass parameter at /formPasswordSetup. This vulnerability allows attackers to execute arbitrary code via a crafted payload. NOTE:
- 8.8 High severity
Tew-820ap Firmware: Out-of-bounds Write
TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the submit-url parameter at /formSystemCheck. This vulnerability allows attackers to execute arbitrary code via a crafted payload. NOTE
- 8.8 High severity
tew-820ap_firmware: Out-of-bounds Write
TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the submit-url parameter at /formNewSchedule. This vulnerability allows attackers to execute arbitrary code via a crafted payload. NOTE
- 9.8 Critical severity
Tew-755ap Firmware: Out-of-bounds Write
TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wps_sta_enrollee_pin parameter in the action set_sta_enrollee_pin_24g function.
- 9.8 Critical severity
Tew-755ap Firmware: Improper Neutralization of Special Elements used in an OS Command
TRENDnet TEW755AP 1.13B01 was discovered to contain a command injection vulnerability via the wps_sta_enrollee_pin parameter in the action set_sta_enrollee_pin_5g function.
- 9.8 Critical severity
Tew-755ap Firmware: Improper Neutralization of Special Elements used in an OS Command
TRENDnet TEW755AP 1.13B01 was discovered to contain a command injection vulnerability via the sys_service parameter in the setup_wizard_mydlink (sub_4104B8) function.
- 9.8 Critical severity
Tew-755ap Firmware: Out-of-bounds Write
TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.netstat_rsname parameter in the tools_netstat (sub_41E730) function.
- 9.8 Critical severity
Tew-755ap Firmware: Out-of-bounds Write
TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.netstat_option parameter in the tools_netstat (sub_41E730) function.
- 9.8 Critical severity
Tew-755ap Firmware: Out-of-bounds Write
TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the qcawifi.wifi%d_vap%d.maclist parameter in the kick_ban_wifi_mac_allow (sub_415B00) function.
- 9.8 Critical severity
Tew-755ap Firmware: Out-of-bounds Write
TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the qcawifi.wifi%d_vap%d.maclist parameter in the kick_ban_wifi_mac_deny (sub_415D7C) function.
- 8.8 High severity
Tew-820ap Firmware: Out-of-bounds Write
A stack overflow vulnerability exists in TrendNet Wireless AC Easy-Upgrader TEW-820AP (Version v1.0R, firmware version 1.01.B01) which may result in remote code execution.
- 9.8 Critical severity
Tew-831dr Firmware: Improper Neutralization of Special Elements used in an OS Command
An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. An OS injection vulnerability exists within the web interface, allowing an attacker with valid credentials to execute arbitrary shell commands.
- 8.8 High severity
Tew-831dr Firmware: Weak Password Requirements
An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The default pre-shared key for the Wi-Fi networks is the same for every router except for the last four digits. The device default pre-shared key for both 2.4 GHz and 5 GHz networks can be gu
- 9.8 Critical severity
D-Link and TRENDnet Multiple Devices Remote Code Execution Exploited
The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.