CVE-2021-32424

8.8 highEPSS 0.4%

High (8.8) in trendnet tw100-s4w1ca firmware. EPSS 0.4% chance of exploitation in the next 30 days.

In TrendNet TW100-S4W1CA 2.3.32, due to a lack of proper session controls, a threat actor could make unauthorized changes to an affected router via a specially crafted web page. If an authenticated user were to interact with a malicious web page it could allow for a complete takeover of the router.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2021-06-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

trendnet:tw100-s4w1ca_firmware

References

https://github.com/Galapag0s/Trendnet_TW100-S4W1CA/blob/main/writeup_CSRF.txt
https://github.com/Galapag0s/Trendnet_TW100-S4W1CA/blob/main/writeup_CSRF.txt

Check your stack JSON