Stack-based Buffer Overflow in TRENDnet TV-IP1314PI Camera
CVE-2023-49236

9.8CRITICAL

Key Information:

Vendor

TRENDnet

Status
Tv-ip1314pi Firmware
Vendor
CVE Published:
9 January 2024

What is CVE-2023-49236?

The TRENDnet TV-IP1314PI model has been found vulnerable to a stack-based buffer overflow due to insufficient length validation in the RTSP playback functionality. This flaw enables an attacker to execute arbitrary commands on the device by crafting a malicious input that overflows the buffer during the processing of a user-entered scale field. Users of this device are advised to apply updates and monitor for any reported exploits.

References

https://drive.google.com/file/d/1lTloBkH_7zAz1ZbFVSZnfpoP...
https://github.com/pcsle37/TRENDnet/blob/main/TRENDnet_vu...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.