CVE-2021-28841
HIGHTRENDnet TEW-755AP, TEW-755AP2KAC, TEW-821DAP2KAC, TEW-825DAP 1.11B03 - Denial of Service via POST Request to apply_cgi
Title source: llmDescription
Null Pointer Dereference vulnerability in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could let a remote malicious user cause a denial of service by sending a POST request to apply_cgi via an action ping_test without a ping_ipaddr key.
References (1)
Core 1
Core References
Third Party Advisory x_refsource_misc
https://github.com/zyw-200/EQUAFL/blob/main/TRENDnet%20ticket.pdf
Scores
CVSS v3
7.5
EPSS
0.0034
EPSS Percentile
56.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-476
Status
published
Products (4)
trendnet/tew-755ap2kac_firmware
1.11b03
trendnet/tew-755ap_firmware
1.11b03
trendnet/tew-821dap2kac_firmware
1.11b03
trendnet/tew-825dap_firmware
1.11b03
Published
Aug 10, 2021
Tracked Since
Feb 18, 2026