CVE-2021-33317: TRENDnet Teg-30102ws Firmware

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

The TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suffers from a null pointer dereference vulnerability. This vulnerability exists in its lldp related component. Due to fail to check if ChassisID TLV is contained in the packet, by sending a crafted lldp packet to the device, an attacker can crash the process due to null pointer dereference.

Affected products

• TRENDnet Teg-30102ws Firmware: affected versions not specified
• TRENDnet Ti-g102i Firmware: affected versions not specified
• TRENDnet Ti-g160i Firmware: affected versions not specified
• TRENDnet Ti-g642i Firmware: affected versions not specified
• TRENDnet Ti-PG102I Firmware: affected versions not specified
• TRENDnet Ti-PG1284I Firmware: before 2.0.2.s0 (fixed in 2.0.2.s0)
• TRENDnet Ti-PG541I Firmware: affected versions not specified
• TRENDnet Ti-RP262I Firmware: affected versions not specified
• TRENDnet Tpe-30102ws Firmware: affected versions not specified

Published 2022-05-11. Last modified 2026-06-17.