Approved changes feed: RSS · Atom

cpe:2.3:h:trendnet:tew-822dre:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorTrendnet (4262376e-0c1d-55de-8dcc-074e5a926aa7)
ProductTew 822Dre (a640373d-b02d-5b65-ba1c-429b4744e76e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-15139 not_vulnerable 2026-06-08 07:06:35.769782 TRENDnet TEW-822DRE formWsc sub_43ACF4  command injection
MEDIUM (6.3)
A vulnerability has been found in TRENDnet TEW-822DRE 1.00B21/1.01B06. This affects the function sub_43ACF4  of the file /boafrm/formWsc. Such manipulation of the argument peerPin leads to command injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-12-28T14:02:07.407Z
Updated: 2026-02-24T06:06:59.708Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0920 not_vulnerable 2026-06-08 06:22:03.138888 TRENDnet TEW-822DRE POST Request admin_ping.htm command injection
HIGH (7.2)
A vulnerability was found in TRENDnet TEW-822DRE 1.03B02. It has been declared as critical. This vulnerability affects unknown code of the file /admin_ping.htm of the component POST Request Handler. The manipulation of the argument ipv4_ping/ipv6_ping leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252124. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-01-26T08:08:36.975Z
Updated: 2025-06-17T14:27:29.228Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51835 not_vulnerable 2026-06-08 06:17:54.078838 Details available
An issue in TRENDnet TEW-822DRE v.1.03B02 allows a local attacker to execute arbitrary code via the parameters ipv4_ping in the /boafrm/formSystemCheck.
Published: 2024-02-01T00:00:00.000Z
Updated: 2024-08-28T19:58:36.362Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.