Trendnet

Tw100-s4w1ca Firmware

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2021-32424

  • EPSS 0.21%
  • Published 17.06.2021 22:15:07
  • Last modified 21.11.2024 06:07:02

In TrendNet TW100-S4W1CA 2.3.32, due to a lack of proper session controls, a threat actor could make unauthorized changes to an affected router via a specially crafted web page. If an authenticated user were to interact with a malicious web page it c...

6.1

CVE-2021-32426

Exploit
  • EPSS 0.24%
  • Published 17.06.2021 22:15:07
  • Last modified 21.11.2024 06:07:02

In TrendNet TW100-S4W1CA 2.3.32, it is possible to inject arbitrary JavaScript into the router's web interface via the "echo" command.