Vulnerabilities > Trendnet > TV Ip110Wn Firmware

DATE CVE VULNERABILITY TITLE RISK
2022-06-17 CVE-2022-31873 Cross-site Scripting vulnerability in Trendnet Tv-Ip110Wn Firmware 1.2.2.68
Trendnet IP-110wn camera fw_tv-ip110wn_v2(1.2.2.68) has an XSS vulnerability via the prefix parameter in /admin/general.cgi.
network
low complexity
trendnet CWE-79
6.1
2022-06-17 CVE-2022-31875 Cross-site Scripting vulnerability in Trendnet Tv-Ip110Wn Firmware 1.2.2.68
Trendnet IP-110wn camera fw_tv-ip110wn_v2(1.2.2.68) has an xss vulnerability via the proname parameter in /admin/scheprofile.cgi
network
low complexity
trendnet CWE-79
6.1
2021-08-10 CVE-2021-31655 Cross-site Scripting vulnerability in Trendnet Tv-Ip110Wn Firmware 1.2.2.64/1.2.2.65/1.2.2.68
Cross Site Scripting (XSS) vulnerability in TRENDnet TV-IP110WN V1.2.2.64 V1.2.2.65 V1.2.2.68 via the profile parameter.
network
low complexity
trendnet CWE-79
6.1
2019-04-22 CVE-2019-11417 Out-of-bounds Write vulnerability in Trendnet Tv-Ip110Wn Firmware
system.cgi on TRENDnet TV-IP110WN cameras has a buffer overflow caused by an inadequate source-length check before a strcpy operation in the respondAsp function.
network
low complexity
trendnet CWE-787
critical
9.8
2018-12-20 CVE-2018-19241 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Trendnet Tv-Ip110Wn Firmware and Tv-Ip121Wn Firmware
Buffer overflow in video.cgi on TRENDnet TV-IP110WN V1.2.2 build 68, V1.2.2.65, and V1.2.2 build 64 and TV-IP121WN V1.2.2 build 28 devices allows attackers to hijack the control flow to any attacker-specified location by crafting a POST request payload (without authentication).
network
low complexity
trendnet CWE-119
7.5
2018-12-20 CVE-2018-19240 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Trendnet Tv-Ip110Wn Firmware and Tv-Ip121Wn Firmware
Buffer overflow in network.cgi on TRENDnet TV-IP110WN V1.2.2 build 68, V1.2.2.65, and V1.2.2 build 64 and TV-IP121WN V1.2.2 build 28 devices allows attackers to hijack the control flow to any attacker-specified location by crafting a POST request payload (without authentication).
network
low complexity
trendnet CWE-119
critical
9.8