Fuhanhan2015

**Name of the Vulnerable Software and Affected Versions** TRENDnet TEW-755AP versions prior to 20260702 **Description** A command injection flaw exists in the ssi component within the `/cgi-bin/email.cgi` endpoint. The issue resides in the `log email server()` function, allowing a remote attacker to execute arbitrary commands through manipulation. **Recommendations** Update TRENDnet TEW-755AP to a version released after 20260702. As a temporary mitigation, restrict access to the `/cgi-bin/email.cgi` endpoint.

**Name of the Vulnerable Software and Affected Versions** TRENDnet TEW-755AP versions prior to 20260702 **Description** A remote attack is possible due to a stack-based buffer overflow in the `FUN 401000()` function within the `/sbin/mycli` file. This issue occurs when the `ssid` argument is manipulated. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially leading to crashes or arbitrary code execution. **Recommendations** Update TRENDnet TEW-755AP to a version released after 20260702. As a temporary mitigation, restrict access to the `/sbin/mycli` component to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** TRENDnet TEW-755AP versions prior to 20260702 **Description** A remote stack-based buffer overflow exists within the ssi component of the '/cgi-bin/wan.cgi' endpoint. This issue occurs when the `cameo.wan.wan pppoe password 00` argument is manipulated. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially leading to crashes or arbitrary code execution. **Recommendations** Update TRENDnet TEW-755AP to a version released after 20260702. Avoid using the `cameo.wan.wan pppoe password 00` parameter in the '/cgi-bin/wan.cgi' endpoint as a temporary mitigation.

**Name of the Vulnerable Software and Affected Versions** TRENDnet TEW-823DRU version 1.1.02b01 **Description** Remote command injection is possible via the `/cgi-bin/admin.cgi` endpoint. The issue occurs when the `Hostname` argument is manipulated, allowing an attacker to execute arbitrary commands on the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** TRENDnet Router version 1.1.02b01 **Description** A remote command injection flaw exists in the `/cgi-bin/ping.cgi` endpoint. The issue occurs when the `wan type` argument is manipulated, allowing an attacker to execute arbitrary commands on the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `/cgi-bin/ping.cgi` endpoint to minimize the risk of exploitation.

A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected is the function popen/system of the file /cgi-bin/ping.cgi of the component ssi. Executing a manipulation of the argument ipaddr can lead to command injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.

A vulnerability was identified in TRENDnet TV-IP751WIC 11.03.03. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/admin/set time.cgi of the component alphapd. The manipulation leads to command injection. The attack can be initiated remotely. The exploit is publicly available and might be used.

A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/set time.cgi of the component alphapd. The manipulation of the argument Currenttime results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

**Name of the Vulnerable Software and Affected Versions** TRENDnet TEW-823DRU version 1.1.02b01 **Description** A stack-based buffer overflow exists in the NVRAM component. This issue occurs when the `strcpy()` function in the '/cgi-bin/wan.cgi' endpoint improperly handles the `wan l2tp password` argument, allowing a remote attacker to trigger the overflow. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** TRENDnet TV-IP751WIC version 11.03.03 **Description** A flaw in the `alphapd` component allows for a remote stack-based buffer overflow, which occurs when a buffer on the stack is overwritten. This issue affects the following functions: `SystemNetworkChanged()`, `SystemDDNSChanged()`, `SystemEmailChanged()`, `SystemFTPChanged()`, `websCheckRealm()`, `FUN 00432574()`, and `FUN 0043372C()`. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.