Approved changes feed: RSS · Atom

cpe:2.3:o:trendnet:tv-ip1314pi_firmware:5.5.3:200714:*:*:*:*:*:*

part: o version: 5.5.3 update: 200714

VendorTrendnet (4262376e-0c1d-55de-8dcc-074e5a926aa7)
ProductTv Ip1314Pi Firmware (8f262ffd-eff7-5af4-a800-c355d657cb6b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-49237 vulnerable 2026-06-08 06:14:28.852692 Details available
An issue was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices. Command injection can occur because the system function is used by davinci to unpack language packs without strict filtering of URL strings.
Published: 2024-01-09T00:00:00.000Z
Updated: 2025-06-20T15:26:23.066Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49236 vulnerable 2026-06-08 06:14:28.852035 Details available
A stack-based buffer overflow was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices, leading to arbitrary command execution. This occurs because of lack of length validation during an sscanf of a user-entered scale field in the RTSP playback function of davinci.
Published: 2024-01-09T00:00:00.000Z
Updated: 2025-06-20T15:25:37.479Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49235 vulnerable 2026-06-08 06:14:28.850685 Details available
An issue was discovered in libremote_dbg.so on TRENDnet TV-IP1314PI 5.5.3 200714 devices. Filtering of debug information is mishandled during use of popen. Consequently, an attacker can bypass validation and execute a shell command.
Published: 2024-01-09T00:00:00.000Z
Updated: 2025-06-20T15:24:27.005Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.