TRENDnet Tew-652bru Firmware vulnerabilities

6 CVEs affecting TRENDnet Tew-652bru Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-51190, published 2024-11-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-11400, published 2019-12-18. Critical severity, CVSS 9.8. EPSS: 16.6% chance of exploitation in the next 30 days. An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices. A buffer overflow occurs through the get_set.ccp ccp_act parameter.
CVE-2019-11399, published 2019-12-18. Critical severity, CVSS 9.8. EPSS: 3% chance of exploitation in the next 30 days. An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices. OS command injection occurs through the get_set.ccp lanHostCfg_HostName_1.1.1.0.0 parameter.
CVE-2024-51190, published 2024-11-11. Medium severity, CVSS 4.8. EPSS: 1% chance of exploitation in the next 30 days. TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS) vulnerability via the ptRule_ApplicationName_1.1.6.0.0 parameter on the…
CVE-2024-51189, published 2024-11-11. Medium severity, CVSS 4.8. EPSS: 1% chance of exploitation in the next 30 days. TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS) vulnerability via the macList_Name_1.1.1.0.0 parameter on the /filters.htm…
CVE-2024-51188, published 2024-11-11. Medium severity, CVSS 4.8. EPSS: 1% chance of exploitation in the next 30 days. TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS) vulnerability via the vsRule_VirtualServerName_1.1.10.0.0 parameter on the…
CVE-2024-51187, published 2024-11-11. Medium severity, CVSS 4.8. EPSS: 1% chance of exploitation in the next 30 days. TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS) vulnerability via the firewallRule_Name_1.1.1.0.0 parameter on the…