CVE-2021-28844: TRENDnet Tew-755ap2kac Firmware

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03 by sending the POST request to apply_cgi via a do_graph_auth action without a session_id key.

Affected products

• TRENDnet Tew-755ap2kac Firmware: version 1.11b03 only
• TRENDnet Tew-755ap Firmware: version 1.11b03 only
• TRENDnet Tew-821dap2kac Firmware: version 1.11b03 only
• TRENDnet Tew-825dap Firmware: version 1.11b03 only

Published 2021-08-10. Last modified 2026-06-17.