GCVE - cpe:2.3:h:trendnet:tew-825dap:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:trendnet:tew-825dap:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Trendnet (`4262376e-0c1d-55de-8dcc-074e5a926aa7`)
Product	Tew 825Dap (`4b4a898b-4f25-5ac5-ba5f-b5a5b2b4ebb3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-28846`	not_vulnerable	2026-06-08 05:31:25.088868	Details available A Format String vulnerablity exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could let a remote malicious user cause a denial of service due to a logic bug at address 0x40dcd0 when calling fprintf with "%s: key len = %d, too long\n" format. The two variables seem to be put in the wrong order. The vulnerability could be triggered by sending the POST request to apply_cgi with a long and unknown key in the request body. Published: 2021-08-10T19:22:31.000Z Updated: 2024-08-03T21:55:11.827Z Open on db.gcve.eu Reference links https://github.com/zyw-200/EQUAFL/blob/main/TRENDnet%20ticket.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-28845`	not_vulnerable	2026-06-08 05:31:25.088048	Details available Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could let a remote malicious user cause a denial of service by sending the POST request to apply_cgi via the lang action without a language key. Published: 2021-08-10T19:13:10.000Z Updated: 2024-08-03T21:55:12.105Z Open on db.gcve.eu Reference links https://github.com/zyw-200/EQUAFL/blob/main/TRENDnet%20ticket.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-28844`	not_vulnerable	2026-06-08 05:31:25.087381	Details available Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03 by sending the POST request to apply_cgi via a do_graph_auth action without a session_id key. Published: 2021-08-10T18:54:10.000Z Updated: 2024-08-03T21:55:11.617Z Open on db.gcve.eu Reference links https://github.com/zyw-200/EQUAFL/blob/main/TRENDnet%20ticket.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-28843`	not_vulnerable	2026-06-08 05:31:25.086729	Details available Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03 by sending the POST request to apply_cgi with an unknown action name. Published: 2021-08-10T18:47:43.000Z Updated: 2024-08-03T21:55:11.824Z Open on db.gcve.eu Reference links https://github.com/zyw-200/EQUAFL/blob/main/TRENDnet%20ticket.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-28842`	not_vulnerable	2026-06-08 05:31:25.086120	Details available Null Pointer Deference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could let a remote malicious user cause a denial os service by sending the POST request to apply_cgi via action do_graph_auth without login_name key. Published: 2021-08-10T18:34:56.000Z Updated: 2024-08-03T21:55:11.832Z Open on db.gcve.eu Reference links https://github.com/zyw-200/EQUAFL/blob/main/TRENDnet%20ticket.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-28841`	not_vulnerable	2026-06-08 05:31:25.085139	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.