GCVE - cpe:2.3:h:trendnet:tew-632brp:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:trendnet:tew-632brp:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Trendnet (`4262376e-0c1d-55de-8dcc-074e5a926aa7`)
Product	Tew 632Brp (`8675e1bc-0a43-5b36-80aa-25d2116a04fe`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-57590`	not_vulnerable	2026-06-08 06:56:13.612429	Details available TRENDnet TEW-632BRP v1.010B31 devices have an OS command injection vulnerability in the CGl interface "ntp_sync.cgi",which allows remote attackers to execute arbitrary commands via parameter "ntp_server" passed to the "ntp_sync.cgi" binary through a POST request. Published: 2025-01-27T00:00:00.000Z Updated: 2025-01-28T19:46:47.765Z Open on db.gcve.eu Reference links https://github.com/IdaJea/IOT_vuln_1/blob/master/tew632/ntp_sync.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-10216`	not_vulnerable	2026-06-08 05:16:34.887810	Details available An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the date parameter in a system_time.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected. Published: 2020-03-07T00:29:54.000Z Updated: 2024-08-04T10:58:39.450Z Open on db.gcve.eu Reference links https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/Trendnet-TEW-632.pdf https://github.com/kuc001/IoTFirmware/blob/master/D-Link/vulnerability1.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-10215`	not_vulnerable	2026-06-08 05:16:34.887416	Details available An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the dns_query_name parameter in a dns_query.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected. Published: 2020-03-07T00:30:05.000Z Updated: 2024-08-04T10:58:40.280Z Open on db.gcve.eu Reference links https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/Trendnet-TEW-632.pdf https://github.com/kuc001/IoTFirmware/blob/master/D-Link/vulnerability2.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-10213`	not_vulnerable	2026-06-08 05:16:34.886552	Details available An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the wps_sta_enrollee_pin parameter in a set_sta_enrollee_pin.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected. Published: 2020-03-07T00:29:46.000Z Updated: 2024-08-04T10:58:39.634Z Open on db.gcve.eu Reference links https://github.com/kuc001/IoTFirmware/blob/master/D-Link/vulnerability3.md https://github.com/kuc001/IoTFirmware/blob/master/Trendnet/Trendnet-TEW-632.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-11418`	not_vulnerable	2026-06-08 05:12:37.149695	Details available apply.cgi on the TRENDnet TEW-632BRP 1.010B32 router has a buffer overflow via long strings to the SOAPACTION:HNAP1 interface. Published: 2019-04-21T20:09:53.000Z Updated: 2024-08-04T22:55:40.465Z Open on db.gcve.eu Reference links https://github.com/zyw-200/IOTFuzzer/blob/master/Trendnet_response.png	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-19242`	not_vulnerable	2026-06-08 05:11:15.502308	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.