CVE-2021-32426: TRENDnet TW100-s4w1ca Firmware

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

In TrendNet TW100-S4W1CA 2.3.32, it is possible to inject arbitrary JavaScript into the router's web interface via the "echo" command.

Affected products

• TRENDnet TW100-s4w1ca Firmware: version 2.3.32 only

Published 2021-06-17. Last modified 2026-06-17.