Trendnet Tv-Ip1314Pi Firmware vulnerabilities
3 known vulnerabilities affecting trendnet/tv-ip1314pi_firmware.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL3
Vulnerabilities
Page 1 of 1
CVE-2023-49237P2CRITICALCVSS 9.8v5.5.32024-01-09
CVE-2023-49237 [CRITICAL] CWE-77 CVE-2023-49237: An issue was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices. Command injection can occur be
An issue was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices. Command injection can occur because the system function is used by davinci to unpack language packs without strict filtering of URL strings.
nvd
CVE-2023-49236P2CRITICALCVSS 9.8v5.5.32024-01-09
CVE-2023-49236 [CRITICAL] CWE-787 CVE-2023-49236: A stack-based buffer overflow was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices, leading t
A stack-based buffer overflow was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices, leading to arbitrary command execution. This occurs because of lack of length validation during an sscanf of a user-entered scale field in the RTSP playback function of davinci.
nvd
CVE-2023-49235P3CRITICALCVSS 9.8v5.5.32024-01-09
CVE-2023-49235 [CRITICAL] CWE-78 CVE-2023-49235: An issue was discovered in libremote_dbg.so on TRENDnet TV-IP1314PI 5.5.3 200714 devices. Filtering
An issue was discovered in libremote_dbg.so on TRENDnet TV-IP1314PI 5.5.3 200714 devices. Filtering of debug information is mishandled during use of popen. Consequently, an attacker can bypass validation and execute a shell command.
nvd