Vulnerabilities > Trendnet > High

DATE CVE VULNERABILITY TITLE RISK
2022-05-11 CVE-2021-33317 NULL Pointer Dereference vulnerability in Trendnet products
The TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suffers from a null pointer dereference vulnerability.
network
low complexity
trendnet CWE-476
7.5
2021-12-30 CVE-2021-20154 Cleartext Transmission of Sensitive Information vulnerability in Trendnet Tew-827Dru Firmware 2.08B01
Trendnet AC2600 TEW-827DRU version 2.08B01 contains an security flaw in the web interface.
network
low complexity
trendnet CWE-319
7.5
2021-12-30 CVE-2021-20157 Unspecified vulnerability in Trendnet Tew-827Dru Firmware
It is possible for an unauthenticated, malicious user to force the device to reboot due to a hidden administrative command.
network
low complexity
trendnet
7.5
2021-12-30 CVE-2021-20159 OS Command Injection vulnerability in Trendnet Tew-827Dru Firmware 2.08B01
Trendnet AC2600 TEW-827DRU version 2.08B01 is vulnerable to command injection.
network
low complexity
trendnet CWE-78
8.8
2021-12-30 CVE-2021-20160 OS Command Injection vulnerability in Trendnet Tew-827Dru Firmware 2.08B01
Trendnet AC2600 TEW-827DRU version 2.08B01 contains a command injection vulnerability in the smb functionality of the device.
network
low complexity
trendnet CWE-78
8.8
2021-12-30 CVE-2021-20165 Cross-Site Request Forgery (CSRF) vulnerability in Trendnet Tew-827Dru Firmware 2.08B01
Trendnet AC2600 TEW-827DRU version 2.08B01 does not properly implement csrf protections.
network
low complexity
trendnet CWE-352
8.8
2021-08-10 CVE-2021-28845 NULL Pointer Dereference vulnerability in Trendnet products
Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could let a remote malicious user cause a denial of service by sending the POST request to apply_cgi via the lang action without a language key.
network
low complexity
trendnet CWE-476
7.5
2021-08-10 CVE-2021-28841 NULL Pointer Dereference vulnerability in Trendnet products
Null Pointer Dereference vulnerability in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could let a remote malicious user cause a denial of service by sending a POST request to apply_cgi via an action ping_test without a ping_ipaddr key.
network
low complexity
trendnet CWE-476
7.5
2021-08-10 CVE-2021-28842 NULL Pointer Dereference vulnerability in Trendnet products
Null Pointer Deference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could let a remote malicious user cause a denial os service by sending the POST request to apply_cgi via action do_graph_auth without login_name key.
network
low complexity
trendnet CWE-476
7.5
2021-08-10 CVE-2021-28843 NULL Pointer Dereference vulnerability in Trendnet products
Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03 by sending the POST request to apply_cgi with an unknown action name.
network
low complexity
trendnet CWE-476
7.5