Trendnet Tew 652Bru vulnerabilities
6 vulnerabilities
Known vulnerabilities in Trendnet Tew 652Bru, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2024-51188trendnettew-651br_firmware+2
EPSS score0.99%
TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS) vulnerability via the vsRule_VirtualServerName_1.1.10.0.0 parameter on the /virtual_server.htm page.CVE-2024-51190trendnettew-651br_firmware+2EPSS score0.99%
TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS) vulnerability via the ptRule_ApplicationName_1.1.6.0.0 parameter on the /special_ap.htm page.CVE-2024-51187trendnettew-651br_firmware+2EPSS score0.99%
TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS) vulnerability via the firewallRule_Name_1.1.1.0.0 parameter on the /firewall_setting.htm page.CVE-2024-51189trendnettew-651br_firmware+2EPSS score0.99%
TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS) vulnerability via the macList_Name_1.1.1.0.0 parameter on the /filters.htm page.CVE-2019-11399trendnettew-651br_firmware+2EPSS score3.04%
An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices. OS command injection occurs through the get_set.ccp lanHostCfg_HostName_1.1.1.0.0 parameter.CVE-2019-11400trendnettew-651br_firmware+2EPSS score16.64%
An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices. A buffer overflow occurs through the get_set.ccp ccp_act parameter.