CVE-2024-22546

TRENDnet TEW-815DAP 1.0.2.0 is vulnerable to Command Injection via the do_setNTP function. An authenticated attacker with administrator privileges can leverage this vulnerability over the network via a malicious POST request.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:trendnet:tew-815dap_firmware:1.0.2.0:*:*:*:*:*:*:*
cpe:2.3:h:trendnet:tew-815dap:-:*:*:*:*:*:*:*

History

01 Apr 2025, 15:11

Type Values Removed Values Added
First Time Trendnet tew-815dap Firmware
Trendnet
Trendnet tew-815dap
CPE cpe:2.3:o:trendnet:tew-815dap_firmware:1.0.2.0:*:*:*:*:*:*:*
cpe:2.3:h:trendnet:tew-815dap:-:*:*:*:*:*:*:*
References () https://warp-desk-89d.notion.site/TEW-815DAP-94a631c20dee4f399268dbcc880f1f4c - () https://warp-desk-89d.notion.site/TEW-815DAP-94a631c20dee4f399268dbcc880f1f4c - Exploit, Third Party Advisory
References () https://www.trendnet.com/support/support-detail.asp?prod=105_TEW-815DAP - () https://www.trendnet.com/support/support-detail.asp?prod=105_TEW-815DAP - Broken Link, Vendor Advisory

30 Apr 2024, 19:35

Type Values Removed Values Added
New CVE

Information

Published : 2024-04-30 19:15

Updated : 2025-04-01 15:11


NVD link : CVE-2024-22546

Mitre link : CVE-2024-22546


JSON object : View

Products Affected

trendnet

  • tew-815dap
  • tew-815dap_firmware
CWE

No CWE.