CveMateVulnerability intelligence

Trendnet Tew 755Ap vulnerabilities

29 vulnerabilities

Known vulnerabilities in Trendnet Tew 755Ap, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2021-28841trendnettew-755ap_firmware+35y ago10-08-2021 18:02

Null Pointer Dereference vulnerability in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could let a remote malicious user cause a denial of service by sending a POST request to apply_cgi via an action ping_test without a ping_ipaddr key.CVE-2021-28842trendnettew-755ap_firmware+35y ago10-08-2021 18:34

Null Pointer Deference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could let a remote malicious user cause a denial os service by sending the POST request to apply_cgi via action do_graph_auth without login_name key.CVE-2021-28845trendnettew-755ap_firmware+35y ago10-08-2021 19:13

Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could let a remote malicious user cause a denial of service by sending the POST request to apply_cgi via the lang action without a language key.CVE-2021-28843trendnettew-755ap_firmware+35y ago10-08-2021 18:47

Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03 by sending the POST request to apply_cgi with an unknown action name.CVE-2021-28846trendnettew-755ap_firmware+35y ago10-08-2021 19:22

A Format String vulnerablity exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could let a remote malicious user cause a denial of service due to a logic bug at address 0x40dcd0 when calling fprintf with "%s: key len = %d, too long\n" format. The two variables seem to be put in the wrong order. The vulnerability could be triggered by sending the POST request to apply_cgi with a long and unknown key in the request body.CVE-2021-28844trendnettew-755ap_firmware+35y ago10-08-2021 18:54

Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03 by sending the POST request to apply_cgi via a do_graph_auth action without a session_id key.CVE-2022-46598trendnettew-755ap_firmware3y ago30-12-2022 00:00

TRENDnet TEW755AP 1.13B01 was discovered to contain a command injection vulnerability via the wps_sta_enrollee_pin parameter in the action set_sta_enrollee_pin_5g function.CVE-2022-46596trendnettew-755ap_firmware3y ago30-12-2022 00:00

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the del_num parameter in the icp_delete_img (sub_41DEDC) function.CVE-2022-46593trendnettew-755ap_firmware3y ago30-12-2022 00:00

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wps_sta_enrollee_pin parameter in the do_sta_enrollee_wifi function.CVE-2022-46592trendnettew-755ap_firmware3y ago30-12-2022 00:00

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wps_sta_enrollee_pin parameter in the set_sta_enrollee_pin_5g function.CVE-2022-46580trendnettew-755ap_firmware3y ago30-12-2022 00:00

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the user_edit_page parameter in the wifi_captive_portal function.CVE-2022-46600trendnettew-755ap_firmware3y ago30-12-2022 00:00

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wps_sta_enrollee_pin parameter in the action set_sta_enrollee_pin_24g function.CVE-2022-46581trendnettew-755ap_firmware3y ago30-12-2022 00:00

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.nslookup_target parameter in the tools_nslookup function.CVE-2022-46599trendnettew-755ap_firmware3y ago30-12-2022 00:00

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the setlogo_num parameter in the icp_setlogo_img (sub_41DBF4) function.CVE-2022-46597trendnettew-755ap_firmware3y ago30-12-2022 00:00

TRENDnet TEW755AP 1.13B01 was discovered to contain a command injection vulnerability via the sys_service parameter in the setup_wizard_mydlink (sub_4104B8) function.CVE-2022-46601trendnettew-755ap_firmware3y ago30-12-2022 00:00

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the setbg_num parameter in the icp_setbg_img (sub_41DD68) function.CVE-2022-46589trendnettew-755ap_firmware3y ago30-12-2022 00:00

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.netstat_option parameter in the tools_netstat (sub_41E730) function.CVE-2022-46588trendnettew-755ap_firmware3y ago30-12-2022 00:00

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the sys_service parameter in the setup_wizard_mydlink (sub_4104B8) function.CVE-2022-46590trendnettew-755ap_firmware3y ago30-12-2022 00:00

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.netstat_rsname parameter in the tools_netstat (sub_41E730) function.CVE-2022-46586trendnettew-755ap_firmware3y ago30-12-2022 00:00

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the qcawifi.wifi%d_vap%d.maclist parameter in the kick_ban_wifi_mac_allow (sub_415B00) function.