GCVE - cpe:2.3:h:trendnet:tv-ip1314pi:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:trendnet:tv-ip1314pi:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Trendnet (`4262376e-0c1d-55de-8dcc-074e5a926aa7`)
Product	Tv Ip1314Pi (`b7a39f7a-9635-5ebf-b88a-a8344e4ead22`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-49237`	not_vulnerable	2026-06-08 06:14:28.852716	Details available An issue was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices. Command injection can occur because the system function is used by davinci to unpack language packs without strict filtering of URL strings. Published: 2024-01-09T00:00:00.000Z Updated: 2025-06-20T15:26:23.066Z Open on db.gcve.eu Reference links https://drive.google.com/file/d/1lTloBkH_7zAz1ZbFVSZnfpoPd81aPaHx/view?usp=sharing https://github.com/pcsle37/TRENDnet/blob/main/TRENDnet_vul.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-49236`	not_vulnerable	2026-06-08 06:14:28.852208	Details available A stack-based buffer overflow was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices, leading to arbitrary command execution. This occurs because of lack of length validation during an sscanf of a user-entered scale field in the RTSP playback function of davinci. Published: 2024-01-09T00:00:00.000Z Updated: 2025-06-20T15:25:37.479Z Open on db.gcve.eu Reference links https://drive.google.com/file/d/1lTloBkH_7zAz1ZbFVSZnfpoPd81aPaHx/view?usp=sharing https://github.com/pcsle37/TRENDnet/blob/main/TRENDnet_vul.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-49235`	not_vulnerable	2026-06-08 06:14:28.851422	Details available An issue was discovered in libremote_dbg.so on TRENDnet TV-IP1314PI 5.5.3 200714 devices. Filtering of debug information is mishandled during use of popen. Consequently, an attacker can bypass validation and execute a shell command. Published: 2024-01-09T00:00:00.000Z Updated: 2025-06-20T15:24:27.005Z Open on db.gcve.eu Reference links https://drive.google.com/file/d/1lTloBkH_7zAz1ZbFVSZnfpoPd81aPaHx/view?usp=sharing https://github.com/pcsle37/TRENDnet/blob/main/TRENDnet_vul.pdf	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.