GCVE - cpe:2.3:h:trendnet:tew-812dru:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:trendnet:tew-812dru:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Trendnet (`4262376e-0c1d-55de-8dcc-074e5a926aa7`)
Product	Tew 812Dru (`35a77284-cef9-5eec-91df-2a412bd382ff`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-4659`	not_vulnerable	2026-06-08 05:04:49.014384	Details available Buffer overflow in Broadcom ACSD allows remote attackers to execute arbitrary code via a long string to TCP port 5916. This component is used on routers of multiple vendors including ASUS RT-AC66U and TRENDnet TEW-812DRU. Published: 2017-03-14T09:02:00.000Z Updated: 2024-08-06T16:52:26.903Z Open on db.gcve.eu Reference links https://packetstormsecurity.com/files/122562/ASUS-RT-AC66U-ACSD-Remote-Root-Buffer-Overflow.html http://www.linux-magazine.com/Issues/2014/161/Security-and-SOHO-Routers	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3366`	not_vulnerable	2026-06-08 05:04:31.192628	Details available Undocumented TELNET service in TRENDnet TEW-812DRU when a web page named backdoor contains an HTML parameter of password and a value of j78G¬DFdg_24Mhw3. Published: 2019-11-13T21:01:35.000Z Updated: 2024-08-06T16:07:37.505Z Open on db.gcve.eu Reference links https://www.ise.io/casestudies/exploiting-soho-routers/ https://www.ise.io/soho_service_hacks/ https://www.ise.io/wp-content/uploads/2017/07/soho_techreport.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3365`	vulnerable	2026-06-08 05:04:31.182708	Details available TRENDnet TEW-812DRU router allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) wan network prefix to internet/ipv6.asp; (2) remote port to adm/management.asp; (3) pptp username, (4) pptp password, (5) ip, (6) gateway, (7) l2tp username, or (8) l2tp password to internet/wan.asp; (9) NtpDstStart, (10) NtpDstEnd, or (11) NtpDstOffset to adm/time.asp; or (12) device url to adm/management.asp. NOTE: vectors 9, 10, and 11 can be exploited by unauthenticated remote attackers by leveraging CVE-2013-3098. Published: 2014-02-04T16:00:00.000Z Updated: 2024-08-06T16:07:37.856Z Open on db.gcve.eu Reference links http://securityevaluators.com/content/case-studies/routers/Vulnerability_Catalog.pdf http://infosec42.blogspot.com/2013/07/exploit-trendnet-tew-812dru-csrfcommand.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3098`	vulnerable	2026-06-08 05:04:30.144006	Details available Multiple cross-site request forgery (CSRF) vulnerabilities in TRENDnet TEW-812DRU router with firmware before 1.0.9.0 allow remote attackers to hijack the authentication of administrators for requests that (1) change admin credentials in a request to setSysAdm.cgi, (2) enable remote management or (3) enable port forwarding in an Apply action to uapply.cgi, or (4) have unspecified impact via a request to setNTP.cgi. NOTE: some of these details are obtained from third party information. Published: 2014-02-04T16:00:00.000Z Updated: 2024-08-06T16:00:09.778Z Open on db.gcve.eu Reference links http://osvdb.org/95803 http://securityevaluators.com/content/case-studies/routers/Vulnerability_Catalog.pdf http://securityevaluators.com/knowledge/case_studies/routers/trendnet_tew-812dru.php http://secunia.com/advisories/54310 http://infosec42.blogspot.com/2013/07/exploit-trendnet-tew-812dru-csrfcommand.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.