LEGACY PRODUCTS: TEW-410APBP+, TEW-411APBP+, TEW-637AP HARDWARE VERSION V2.0R, TEW-638AP HARDWARE VERSION V2.0R, AND TEW-818DRU HARDWARE VERSION V1.XR POSSIBLE LOCAL AREA NETWORK (LAN) DENIAL OF SERVICE (DOS) VULNERABILITY
TRENDnet has received reports of Local Area Network (LAN) Denial of Service (DoS) vulnerability involving legacy Wi-Fi routers: TEW-411BRP+ firmware 2.07 and TEW-818DRU hardware version V1.xR (firmware 1.0.14.6), and legacy Wi-Fi Access Points: TEW-410APB+ (firmware 1.3.06b), TEW-637AP hardware version V2.0R (firmware 1.3.0.106), and TEW-638AP hardware version V2.0R (firmware 1.2.7). These products have reached their End of Life (EOL) and End of Support, and TRENDnet is unable to provide additional support. TRENDnet recommends customers to retire these products to prevent risk of devices possibly connected to it.
TEW-820AP Wireless AC Upgrader Possible stack overflow vulnerability
TRENDnet has received report of a possible stack overflow vulnerability involving TEW-820AP Wireless AC Upgrader that could allow a malicious cyber attacker to make the product unusable or gain access to its operating system; however, this product has reached its End of Life (EOL) and End of Support, and TRENDnet is unable to verify the vulnerability or provide additional support. TRENDnet recommends customer to retire the product to prevent risk of devices possibly connected to it.
TEW-651BR hardware version V2.3R, TEW-652BRP hardware version V3.0R, and TEW-652BRU hardware version V1.0R Wi-Fi Routers possible cross-site scripting (XSS) vulnerability
TRENDnet is aware of a possible cross-site scripting (XSS) vulnerability in a few of the configuration setup pages involving wi-fi router TEW-651BR hardware version V2.3R (firmware 2.04B1), TEW-652BRP hardware version V3.0R (firmware 3.04B01), and TEW-652BRU hardware version V1.0R (firmware 1.00b12); however, these products have reached their End of Life (EOL) and End of Support, and TRENDnet is unable to verify the vulnerability or provide additional support. TRENDnet recommends customer to retire these products to prevent risk of devices possibly connected to it.
TEW-752DRU WIRELESS ROUTER POSSIBLE BUFFER OVERFLOW VULNERABILITY
TRENDnet is aware of a possible buffer overflow vulnerability involving TEW-752DRU Wireless router that could allow a malicious cyber attacker to make the router unusable or gain access to its operating system; however, this product has reached its End of Life (EOL) and End of Support, and TRENDnet is unable to verify the vulnerability or provide additional support. TRENDnet recommends customer to retire the product to prevent risk of devices possibly connected to it.
TEW-829DRU WIRELESS ROUTER COMMAND INJECTION VULNERABILITY
TRENDnet has received report of a command injection vulnerability when the RADIUS authentication is enabled with TEW-829DRU hardware version v1.xR, firmware 1.0.3.9 and earlier. When exploited successfully, the attacker can have root access to the device. TRENDnet has released firmware update to address the vulnerability.
TV-IP422W WIRELESS NETWORK CAMERA REMOTE CODE EXECUTION VULNERABILITY
TRENDnet is aware of a possible Remote Code Execution (RCE) vulnerability involving TV-IP422W Wireless Network Camera that could allow a malicious cyber attacker to take over the camera and gain access to its operating system; however, this product has reached its End of Life (EOL) and End of Support, and TRENDnet is unable to verify the vulnerability or provide additional support. TRENDnet recommends customer to retire the product to prevent risk of devices possibly connected to it.
TEW-841APO and TEW-840APBO WIRELESS ACCESS POINT lighttpd WEB SERVER VULNERABILITY PATCH
TRENDnet has posted new firmware for TEW-840APBO and TEW-841APBO wireless Access Points. The firmware updates the Access Point's lighttpd web server to version 1.4.54, which addresses vulnerabilities.
TEW-827DRU WIRELESS ROUTER COMMAND INJECTION VULNERABILITIES
TRENDnet has received report of the command injection vulnerability and known vulnerabilities in the cgi interface with TEW-827DRU hardware version 2.xR Firmware 2.10.B01 and earlier. When exploited successfully, the attacker can have root access to the device. TRENDnet has released firmware update to address these vulnerabilities, please click on the link below to go to the product's download page. Or, you can login to the device's management (http://TEW-827DRU) and click on the new firmware available notification on the upper right hand side to perform the firmware upgrade.
INDOOR WIRELESS ACCESS POINTS BUFFER OVERFLOW AND COMMAND INJECTION VULNERABILITIES
TRENDnet is aware of the buffer overflow and command injection vulnerabilities involving the TEW-821DAP Version 2.0R AC1200 Wireless Access Point that could allow a malicious cyber attacker to take over the device and gain access to its operating system.
TEW-821DAP hardware version V2.xR, firmware version 3.01B02 and earlier
TEW-825DAP hardware version v1.xR, firmware version 2.02B01 and earlier
TEW-826DAP hardware version v1.xR, firmware version 2.00B08 and earlier
TEW-921DAP hardware version v1.xR, firmware version 2.13B02 and earlier
IP CAMERAS COMMAND INJECTION AND BUFFER OVERFLOW VULNERABILITIES WITH TV-IP314PI VERSION V2.0R, TV-IP315PI VERSION V2.0R, TV-IP323PI, TV-IP326PI, TV-IP327PI, TV-IP1313PI, TV-IP1314PI, TV-IP1315PI, TV-IP1318PI, AND TV-IP1319PI
TRENDnet has received report of command injection and buffer overflow vulnerabilities involving the IP cameras listed below that could allow a malicious cyber attacker to take over the device and gain access to its operating system.