TRENDnet Tew-831dr Firmware vulnerabilities

5 CVEs affecting TRENDnet Tew-831dr Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-30329, published 2022-06-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-30329, published 2022-06-16. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. An OS injection vulnerability exists within the web interface, allowing an attacker with valid credentials to execute arbitrary…
CVE-2022-30326, published 2022-06-16. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The network pre-shared key field on the web interface is vulnerable to XSS. An attacker can use a simple XSS payload to crash the…
CVE-2022-30327, published 2022-06-16. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The web interface is vulnerable to CSRF. An attacker can change the pre-shared key of the Wi-Fi router if the interface's IP…
CVE-2022-30325, published 2022-06-16. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The default pre-shared key for the Wi-Fi networks is the same for every router except for the last four digits. The device default…
CVE-2022-30328, published 2022-06-16. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The username and password setup for the web interface does not require entering the existing password. A malicious user can change…