Approved changes feed: RSS · Atom

cpe:2.3:h:trendnet:tew-827dru:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorTrendnet (4262376e-0c1d-55de-8dcc-074e5a926aa7)
ProductTew 827Dru (913370c7-180c-5e49-9e62-9196a96eeecd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-36729 not_vulnerable 2026-06-08 06:39:45.620610 Details available
TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action wizard_ipv6 with a sufficiently long reboot_type key.
Published: 2024-06-03T13:57:31.550Z
Updated: 2025-03-19T15:45:44.553Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36728 not_vulnerable 2026-06-08 06:39:45.619899 Details available
TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action vlan_setting with a sufficiently long dns1 or dns 2 key.
Published: 2024-06-03T13:58:51.113Z
Updated: 2025-02-13T15:59:29.702Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28354 not_vulnerable 2026-06-08 06:33:26.924220 Details available
There is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware version 2.10B01. An attacker can inject commands into the post request parameters usapps.@smb[%d].username in the apply.cgi interface, thereby gaining root shell privileges.
Published: 2024-03-15T00:00:00.000Z
Updated: 2024-08-02T20:20:36.382Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28353 not_vulnerable 2026-06-08 06:33:26.923589 Details available
There is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware version 2.10B01. An attacker can inject commands into the post request parameters usapps.config.smb_admin_name in the apply.cgi interface, thereby gaining root shell privileges.
Published: 2024-03-15T00:00:00.000Z
Updated: 2024-08-27T19:59:39.703Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20157 not_vulnerable 2026-06-08 05:29:08.618675 Details available
It is possible for an unauthenticated, malicious user to force the device to reboot due to a hidden administrative command.
Published: 2021-12-30T21:31:03.000Z
Updated: 2024-08-03T17:30:07.471Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14081 not_vulnerable 2026-06-08 05:18:02.008769 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14080 not_vulnerable 2026-06-08 05:18:02.008340 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14079 not_vulnerable 2026-06-08 05:18:02.008017 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14078 not_vulnerable 2026-06-08 05:18:02.007675 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14077 not_vulnerable 2026-06-08 05:18:02.007365 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14076 not_vulnerable 2026-06-08 05:18:02.007033 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14075 not_vulnerable 2026-06-08 05:18:02.006632 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14074 not_vulnerable 2026-06-08 05:18:02.006062 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13155 not_vulnerable 2026-06-08 05:12:41.007787 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13154 not_vulnerable 2026-06-08 05:12:41.007488 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13153 not_vulnerable 2026-06-08 05:12:41.007187 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13152 not_vulnerable 2026-06-08 05:12:41.006879 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13151 not_vulnerable 2026-06-08 05:12:41.006579 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13150 not_vulnerable 2026-06-08 05:12:41.006257 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13149 not_vulnerable 2026-06-08 05:12:41.005824 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13148 not_vulnerable 2026-06-08 05:12:41.005392 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.