TRENDnet TEW733GR Firmware vulnerabilities

3 CVEs affecting TRENDnet TEW733GR Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-38556, published 2022-08-28.

More from TRENDnet.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-37053, published 2022-08-28. Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days. TRENDnet TEW733GR v1.03B01 is vulnerable to Command injection via /htdocs/upnpinc/gena.php.
• CVE-2018-7034, published 2018-02-14. High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days. TRENDnet TEW-751DR v1.03B03, TEW-752DRU v1.03B01, and TEW733GR v1.03B01 devices allow authentication bypass via an AUTHORIZED_GROUP=1 value, as demonstrated by a request for getcfg.php.
• CVE-2022-38556, published 2022-08-28. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Trendnet TEW733GR v1.03B01 contains a Static Default Credential vulnerability in /etc/init0.d/S80telnetd.sh.