TRENDnet Tew-752dru Firmware vulnerabilities

3 CVEs affecting TRENDnet Tew-752dru Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-42813, published 2024-08-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-7034, published 2018-02-14. High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days. TRENDnet TEW-751DR v1.03B03, TEW-752DRU v1.03B01, and TEW733GR v1.03B01 devices allow authentication bypass via an AUTHORIZED_GROUP=1 value, as demonstrated by a request for getcfg.php.
CVE-2022-33007, published 2022-06-27. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. TRENDnet Wi-Fi routers TEW751DR v1.03 and TEW-752DRU v1.03 were discovered to contain a stack overflow via the function genacgi_main.
CVE-2024-42813, published 2024-08-19. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. In TRENDnet TEW-752DRU FW1.03B01, there is a buffer overflow vulnerability due to the lack of length verification for the service field in gena.cgi. Attackers who successfully exploit this…