Approved changes feed: RSS · Atom

cpe:2.3:o:trendnet:tew-825dap_firmware:1.11b03:*:*:*:*:*:*:*

part: o version: 1.11b03 update: *

VendorTrendnet (4262376e-0c1d-55de-8dcc-074e5a926aa7)
ProductTew 825Dap Firmware (30941685-e4c6-55aa-a717-3087d85f6bbd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-28846 vulnerable 2026-06-08 05:31:25.088766 Details available
A Format String vulnerablity exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could let a remote malicious user cause a denial of service due to a logic bug at address 0x40dcd0 when calling fprintf with "%s: key len = %d, too long\n" format. The two variables seem to be put in the wrong order. The vulnerability could be triggered by sending the POST request to apply_cgi with a long and unknown key in the request body.
Published: 2021-08-10T19:22:31.000Z
Updated: 2024-08-03T21:55:11.827Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28845 vulnerable 2026-06-08 05:31:25.088031 Details available
Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could let a remote malicious user cause a denial of service by sending the POST request to apply_cgi via the lang action without a language key.
Published: 2021-08-10T19:13:10.000Z
Updated: 2024-08-03T21:55:12.105Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28844 vulnerable 2026-06-08 05:31:25.087363 Details available
Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03 by sending the POST request to apply_cgi via a do_graph_auth action without a session_id key.
Published: 2021-08-10T18:54:10.000Z
Updated: 2024-08-03T21:55:11.617Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28843 vulnerable 2026-06-08 05:31:25.086712 Details available
Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03 by sending the POST request to apply_cgi with an unknown action name.
Published: 2021-08-10T18:47:43.000Z
Updated: 2024-08-03T21:55:11.824Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28842 vulnerable 2026-06-08 05:31:25.086019 Details available
Null Pointer Deference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could let a remote malicious user cause a denial os service by sending the POST request to apply_cgi via action do_graph_auth without login_name key.
Published: 2021-08-10T18:34:56.000Z
Updated: 2024-08-03T21:55:11.832Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28841 vulnerable 2026-06-08 05:31:25.084422 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.