Stack Overflow Vulnerability in TrendNet Wireless AC Easy-Upgrader
CVE-2023-24099

8.8HIGH

Key Information:

Vendor

Trendnet

Status
Tew-820ap Firmware
Vendor
CVE Published:
23 January 2023

What is CVE-2023-24099?

The TrendNet Wireless AC Easy-Upgrader TEW-820AP, specifically firmware version 1.01.B01, has a stack overflow vulnerability associated with the username parameter at /formWizardPassword. This flaw can potentially allow remote attackers to exploit the system by sending a specially crafted payload, resulting in arbitrary code execution. It is important to note that this vulnerability affects products that are no longer actively supported by TrendNet, leaving them open to exploitation.

References

https://github.com/chunklhit/cve/blob/master/TRENDNet/TEW...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2023-24099 : Stack Overflow Vulnerability in TrendNet Wireless AC Easy-Upgrader