CVE Feed

    Dashboard / CVE / CVE-2024-51187

    CVE-2024-51187

    TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS) vulnerability via the firewallRule_Name_1.1.1.0.0 parameter on the /firewall_setting.htm page.

    Published:Nov 11, 2024
    Last Modified:Apr 1, 2025
    EPS:Nov 11, 2024
    EPSS Score:0.00202
    CVSS Score:4.8

    Affected Products

    Vendor
    Trendnet
    Product
    Tew-651br
    Vendor
    Trendnet
    Product
    Tew-651br Firmware
    Vendor
    Trendnet
    Product
    Tew-652brp
    Vendor
    Trendnet
    Product
    Tew-652brp Firmware
    Vendor
    Trendnet
    Product
    Tew-652bru
    Vendor
    Trendnet
    Product
    Tew-652bru Firmware

    Exploits

    https://github.com/4hsien/CVE-vulns/blob/main/TRENDnet/TEW-652BRP/XSS_Firewall_Rule/README.md

    Related CVEs

    CVE-2024-51188 (CVSS 4.8) — TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scrip…
    CVE-2024-51189 (CVSS 4.8) — TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scrip…
    CVE-2024-51190 (CVSS 4.8) — TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scrip…
    CVE-2019-11400 (CVSS 9.8) — An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices. A bu…
    CVE-2019-11399 (CVSS 9.8) — An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices. OS c…
    CVE-2015-1187 (CVSS 9.8) — The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High