← All advisories

Medium severity6.1NVD Advisory· Published Jun 17, 2021· Updated Jun 17, 2026

CVE-2021-32426

CVE-2021-32426

Description

In TrendNet TW100-S4W1CA 2.3.32, it is possible to inject arbitrary JavaScript into the router's web interface via the "echo" command.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Trendnet/Tw100 S4w1ca Firmware
cpe:2.3:o:trendnet:tw100-s4w1ca_firmware:2.3.32:*:*:*:*:*:*:*
Trendnet/TW100-S4W1CAllm-fuzzy2 versions
= 2.3.32+ 1 more
- (no CPE)range: = 2.3.32
- (no CPE)

Patches

Vulnerability mechanics

References

1

github.com/Galapag0s/Trendnet_TW100-S4W1CA/blob/main/writeup_XSS.txtnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.