TRENDnet TEW-755AP Stack Overflow Vulnerability (CNVD-2023-18954)

TRENDnet TEW-755AP is a router from TRENDnet, Inc. A stack overflow vulnerability exists in TRENDnet TEW-755AP, which stems from the lack of size checking of the wps_sta_enrollee_pin parameter in the set_sta_enrollee_pin_24g function for incoming data. Lack of size checking allows an attacker to execute arbitrary code on the system.