TRENDnet TEW-755AP Stack Overflow Vulnerability (CNVD-2023-18944)

TRENDnet TEW-755AP is a router from Trendnet, Inc. TRENDnet TEW-755AP is vulnerable to a stack overflow vulnerability that originates from the qcawifi.wifi%d_mac_deny (sub_415D7C) function in the kick_ban_wifi_mac_deny (sub_415D7C) function. vap%d.maclist parameter in the function lacks size checking of the input data, which could be exploited by an attacker to execute arbitrary code on the system.