Medium severity4.8NVD Advisory· Published Nov 11, 2024· Updated Jun 17, 2026

CVE-2024-51187

Description

TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting (XSS) vulnerability via the firewallRule_Name_1.1.1.0.0 parameter on the /firewall_setting.htm page.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Trendnet/Tew 651br Firmware
cpe:2.3:o:trendnet:tew-651br_firmware:2.04b1:*:*:*:*:*:*:*
Trendnet/Tew 652brp Firmware
cpe:2.3:o:trendnet:tew-652brp_firmware:3.04b01:*:*:*:*:*:*:*
Trendnet/Tew 652bru Firmware
cpe:2.3:o:trendnet:tew-652bru_firmware:1.00b12:*:*:*:*:*:*:*
Trendnet/TEW-651BRcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 2.04B1
Trendnet/TEW-652BRUllm-fuzzy
Range: 3.04b01

Patches

Vulnerability mechanics

References

github.com/4hsien/CVE-vulns/blob/main/TRENDnet/TEW-652BRP/XSS_Firewall_Rule/README.mdnvdExploitThird Party Advisory
www.trendnet.com/products/product-detailnvdBroken LinkProduct
www.trendnet.com/products/product-detailnvdBroken LinkProduct
www.trendnet.com/products/product-detailnvdBroken LinkProduct

News mentions

No linked articles in our index yet.

cvss	0.312
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000