TRENDnet Tv-IP110WN Firmware vulnerabilities

6 CVEs affecting TRENDnet Tv-IP110WN Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-31875, published 2022-06-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-19240, published 2018-12-20. Critical severity, CVSS 9.8. EPSS: 3.7% chance of exploitation in the next 30 days. Buffer overflow in network.cgi on TRENDnet TV-IP110WN V1.2.2 build 68, V1.2.2.65, and V1.2.2 build 64 and TV-IP121WN V1.2.2 build 28 devices allows attackers to hijack the control flow to any…
CVE-2018-19241, published 2018-12-20. High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days. Buffer overflow in video.cgi on TRENDnet TV-IP110WN V1.2.2 build 68, V1.2.2.65, and V1.2.2 build 64 and TV-IP121WN V1.2.2 build 28 devices allows attackers to hijack the control flow to any…
CVE-2019-11417, published 2019-04-22. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. system.cgi on TRENDnet TV-IP110WN cameras has a buffer overflow caused by an inadequate source-length check before a strcpy operation in the respondAsp function. Attackers can exploit the…
CVE-2021-31655, published 2021-08-10. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. Cross Site Scripting (XSS) vulnerability in TRENDnet TV-IP110WN V1.2.2.64 V1.2.2.65 V1.2.2.68 via the profile parameter. in a GET request in view.cgi.
CVE-2022-31875, published 2022-06-17. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. Trendnet IP-110wn camera fw_tv-ip110wn_v2(1.2.2.68) has an xss vulnerability via the proname parameter in /admin/scheprofile.cgi
CVE-2022-31873, published 2022-06-17. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. Trendnet IP-110wn camera fw_tv-ip110wn_v2(1.2.2.68) has an XSS vulnerability via the prefix parameter in /admin/general.cgi.