Tew 827Dru Firmware

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:trendnet:tew-827dru_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorTrendnet (4262376e-0c1d-55de-8dcc-074e5a926aa7)
ProductTew 827Dru Firmware (5f5bebdb-a8f1-5127-813f-e6f4225cde07)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-36729 vulnerable 2026-06-08 06:39:45.620449 Details available
TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action wizard_ipv6 with a sufficiently long reboot_type key.
Published: 2024-06-03T13:57:31.550Z
Updated: 2025-03-19T15:45:44.553Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36728 vulnerable 2026-06-08 06:39:45.618442 Details available
TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action vlan_setting with a sufficiently long dns1 or dns 2 key.
Published: 2024-06-03T13:58:51.113Z
Updated: 2025-02-13T15:59:29.702Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14081 vulnerable 2026-06-08 05:18:02.008744 Details available
TRENDnet TEW-827DRU devices through 2.06B04 contain multiple command injections in apply.cgi via the action send_log_email with the key auth_acname (or auth_passwd), allowing an authenticated user to run arbitrary commands on the device.
Published: 2020-06-15T03:36:16.000Z
Updated: 2024-08-04T12:39:35.834Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14080 vulnerable 2026-06-08 05:18:02.008315 Details available
TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an unauthenticated user to execute arbitrary code by POSTing to apply_sec.cgi via the action ping_test with a sufficiently long ping_ipaddr key.
Published: 2020-06-15T03:36:27.000Z
Updated: 2024-08-04T12:39:35.633Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14079 vulnerable 2026-06-08 05:18:02.007996 Details available
TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action auto_up_fw (or auto_up_lp) with a sufficiently long update_file_name key.
Published: 2020-06-15T03:36:34.000Z
Updated: 2024-08-04T12:39:35.995Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14078 vulnerable 2026-06-08 05:18:02.007655 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14077 vulnerable 2026-06-08 05:18:02.007343 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14076 vulnerable 2026-06-08 05:18:02.007009 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14075 vulnerable 2026-06-08 05:18:02.006599 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14074 vulnerable 2026-06-08 05:18:02.005184 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13280 vulnerable 2026-06-08 05:12:42.069747 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13279 vulnerable 2026-06-08 05:12:42.069214 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13278 vulnerable 2026-06-08 05:12:42.068906 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13277 vulnerable 2026-06-08 05:12:42.068580 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13276 vulnerable 2026-06-08 05:12:42.066393 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13155 vulnerable 2026-06-08 05:12:41.007765 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13154 vulnerable 2026-06-08 05:12:41.007467 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13153 vulnerable 2026-06-08 05:12:41.007165 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13152 vulnerable 2026-06-08 05:12:41.006858 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13151 vulnerable 2026-06-08 05:12:41.006557 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13150 vulnerable 2026-06-08 05:12:41.006234 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13149 vulnerable 2026-06-08 05:12:41.005800 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13148 vulnerable 2026-06-08 05:12:41.004675 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.