Approved changes feed: RSS · Atom

cpe:2.3:o:trendnet:tw100-s4w1ca_firmware:2.3.32:*:*:*:*:*:*:*

part: o version: 2.3.32 update: *

VendorTrendnet (4262376e-0c1d-55de-8dcc-074e5a926aa7)
ProductTw100 S4W1Ca Firmware (4746851e-be1f-54b6-be40-373361f3cfc9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-32426 vulnerable 2026-06-08 05:31:54.778159 Details available
In TrendNet TW100-S4W1CA 2.3.32, it is possible to inject arbitrary JavaScript into the router's web interface via the "echo" command.
Published: 2021-06-17T21:49:26.000Z
Updated: 2024-08-03T23:17:29.249Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32424 vulnerable 2026-06-08 05:31:54.776739 Details available
In TrendNet TW100-S4W1CA 2.3.32, due to a lack of proper session controls, a threat actor could make unauthorized changes to an affected router via a specially crafted web page. If an authenticated user were to interact with a malicious web page it could allow for a complete takeover of the router.
Published: 2021-06-17T21:49:12.000Z
Updated: 2024-08-03T23:17:29.550Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.