cbcvebase.
CVE-2024-51188
published 2024-11-11

CVE-2024-51188: TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS) vulnerability via the…

PriorityP418medium4.8CVSS 3.1
AVAACLPRLUIRSCCLILAN
EPSS
0.38%
30.2th percentile
TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS) vulnerability via the vsRule_VirtualServerName_1.1.10.0.0 parameter on the /virtual_server.htm page.

Affected

3 ranges
VendorProductVersion rangeFixed in
trendnettew-651br_firmware——
trendnettew-652brp_firmware——
trendnettew-652bru_firmware——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.