TRENDnet Tew-751dr Firmware vulnerabilities

2 CVEs affecting TRENDnet Tew-751dr Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-33007, published 2022-06-27.

More from TRENDnet.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-7034, published 2018-02-14. High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days. TRENDnet TEW-751DR v1.03B03, TEW-752DRU v1.03B01, and TEW733GR v1.03B01 devices allow authentication bypass via an AUTHORIZED_GROUP=1 value, as demonstrated by a request for getcfg.php.
• CVE-2022-33007, published 2022-06-27. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. TRENDnet Wi-Fi routers TEW751DR v1.03 and TEW-752DRU v1.03 were discovered to contain a stack overflow via the function genacgi_main.