TRENDnet Tew-673gru Firmware vulnerabilities

2 CVEs affecting TRENDnet Tew-673gru Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-19242, published 2018-12-20.

More from TRENDnet.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-19239, published 2018-12-20. High severity, CVSS 7.2. EPSS: 5.1% chance of exploitation in the next 30 days. TRENDnet TEW-673GRU v1.00b40 devices have an OS command injection vulnerability in the start_arpping function of the timer binary, which allows remote attackers to execute arbitrary commands via…
• CVE-2018-19242, published 2018-12-20. High severity, CVSS 8.8. EPSS: 2.9% chance of exploitation in the next 30 days. Buffer overflow in apply.cgi on TRENDnet TEW-632BRP 1.010B32 and TEW-673GRU devices allows attackers to hijack the control flow to any attacker-specified location by crafting a POST request payload…