Approved changes feed: RSS · Atom

cpe:2.3:o:trendnet:tew-821dap_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorTrendnet (4262376e-0c1d-55de-8dcc-074e5a926aa7)
ProductTew 821Dap Firmware (15101c88-c117-5496-a2a1-a18731a7b26e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-15487 vulnerable 2026-07-29 00:26:18.149914 TRENDnet TEW-821DAP Firmware Update system_ntp sub_41FBD0 os command injection
MEDIUM (6.3)
A vulnerability was found in TRENDnet TEW-821DAP 1.11B03. This impacts the function sub_41FBD0 of the file /goform/system_ntp of the component Firmware Update Handler. Performing a manipulation of the argument Hostname results in os command injection. The attack may be initiated remotely. The vendor explains: "We are unable to confirm the existence of the vulnerabilities for (...) TEW-821DAP (v1.0R) as these items have been EOL. " This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2026-07-12T08:30:08.630Z
Updated: 2026-07-13T15:17:08.354Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15486 vulnerable 2026-07-29 00:26:18.149621 TRENDnet TEW-821DAP Firmware Update tools_ddns sub_42026C os command injection
MEDIUM (6.3)
A vulnerability has been found in TRENDnet TEW-821DAP 1.11B03. This affects the function sub_42026C of the file /goform/tools_ddns of the component Firmware Update Handler. Such manipulation of the argument hostname/username/password leads to os command injection. The attack can be launched remotely. The vendor explains: "We are unable to confirm the existence of the vulnerabilities for (...) TEW-821DAP (v1.0R) as these items have been EOL. " This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2026-07-12T08:15:07.110Z
Updated: 2026-07-13T18:12:38.015Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15485 vulnerable 2026-07-29 00:26:18.149332 TRENDnet TEW-821DAP DNS Lookup tools_nslookup sub_43F2C4 os command injection
MEDIUM (6.3)
A flaw has been found in TRENDnet TEW-821DAP 1.11B03. The impacted element is the function sub_43F2C4 of the file /goform/tools_nslookup of the component DNS Lookup Handler. This manipulation of the argument nslookup_target/dns_server causes os command injection. The attack can be initiated remotely. The vendor explains: "We are unable to confirm the existence of the vulnerabilities for (...) TEW-821DAP (v1.0R) as these items have been EOL. " This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2026-07-12T07:00:17.966Z
Updated: 2026-07-14T14:40:25.911Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15484 vulnerable 2026-07-29 00:26:18.149063 TRENDnet TEW-821DAP ssi tools_nslookup sub_41EC14 buffer overflow
HIGH (8.8)
A vulnerability was detected in TRENDnet TEW-821DAP 1.12B01. The affected element is the function sub_41EC14 of the file /goform/tools_nslookup of the component ssi. The manipulation results in buffer overflow. It is possible to launch the attack remotely. The vendor explains: "We are unable to confirm the existence of the vulnerabilities for (...) TEW-821DAP (v1.0R) as these items have been EOL. " This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2026-07-12T06:30:06.606Z
Updated: 2026-07-13T16:30:10.949Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15483 vulnerable 2026-07-29 00:26:18.148853 TRENDnet TEW-821DAP ssi tools_nslookup sub_41EC14 buffer overflow
HIGH (8.8)
A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the function sub_41EC14 of the file /goform/tools_nslookup of the component ssi. The manipulation of the argument nslookup_target leads to buffer overflow. It is possible to initiate the attack remotely. The vendor explains: "We are unable to confirm the existence of the vulnerabilities for (...) TEW-821DAP (v1.0R) as these items have been EOL. " This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2026-07-12T06:15:05.879Z
Updated: 2026-07-15T16:22:52.567Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7611 vulnerable 2026-06-08 08:08:57.465039 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7610 vulnerable 2026-06-08 08:08:57.464568 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7609 vulnerable 2026-06-08 08:08:57.463984 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7608 vulnerable 2026-06-08 08:08:57.463597 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7607 vulnerable 2026-06-08 08:08:57.463048 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7606 vulnerable 2026-06-08 08:08:57.460195 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.