TRENDnet Tv-IP1314PI Firmware vulnerabilities

3 CVEs affecting TRENDnet Tv-IP1314PI Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-49237, published 2024-01-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-49237, published 2024-01-09. Critical severity, CVSS 9.8. EPSS: 18.6% chance of exploitation in the next 30 days. An issue was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices. Command injection can occur because the system function is used by davinci to unpack language packs without strict filtering of…
CVE-2023-49236, published 2024-01-09. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. A stack-based buffer overflow was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices, leading to arbitrary command execution. This occurs because of lack of length validation during an sscanf of…
CVE-2023-49235, published 2024-01-09. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. An issue was discovered in libremote_dbg.so on TRENDnet TV-IP1314PI 5.5.3 200714 devices. Filtering of debug information is mishandled during use of popen. Consequently, an attacker can bypass…