CVE-2018-19240

Buffer overflow in network.cgi on TRENDnet TV-IP110WN V1.2.2 build 68, V1.2.2.65, and V1.2.2 build 64 and TV-IP121WN V1.2.2 build 28 devices allows attackers to hijack the control flow to any attacker-specified location by crafting a POST request payload (without authentication).

• CWE-119

• http://packetstormsecurity.com/files/150693/TRENDnet-Command-Injection-Buffer-Overflow-Cross-Site-Scripting.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2018/Dec/21Mailing List, Third Party Advisory
• http://packetstormsecurity.com/files/150693/TRENDnet-Command-Injection-Buffer-Overflow-Cross-Site-Scripting.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2018/Dec/21Mailing List, Third Party Advisory

Published

Dec 20, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-19229An issue was discovered in LAOBANCMS 2.0. It allows XSS via …
• CVE-2018-1923IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Se…8.4
• CVE-2018-19232The web service on Epson WorkForce WF-2861 10.48 LQ22I3(Reco…
• CVE-2018-19233COMPAREX Miss Marple Enterprise Edition before 2.0 allows lo…
• CVE-2018-19234The Miss Marple Updater Service in COMPAREX Miss Marple Ente…
• CVE-2018-19239TRENDnet TEW-673GRU v1.00b40 devices have an OS command inje…
• CVE-2018-19241Buffer overflow in video.cgi on TRENDnet TV-IP110WN V1.2.2 b…
• CVE-2018-19242Buffer overflow in apply.cgi on TRENDnet TEW-632BRP 1.010B32…
• CVE-2018-19244An XML External Entity (XXE) vulnerability exists in the Cha…
• CVE-2018-19246PHP-Proxy 5.1.0 allows remote attackers to read local files …
• CVE-2018-19248The web service on Epson WorkForce WF-2861 10.48 LQ22I3(Reco…
• CVE-2018-19249The Stripe API v1 allows remote attackers to bypass intended…