Lucene search

MitreCVE-2022-46588

HistoryDec 30, 2022 - 9:15 p.m.

CVE-2022-46588

2022-12-3021:15:10

CWE-787

mitre

web.nvd.nist.gov

cve-2022-46588

trendnet tew755ap

stack overflow

sys_service parameter

nvd

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.002

Percentile

61.9%

JSON

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the sys_service parameter in the setup_wizard_mydlink (sub_4104B8) function.

Affected configurations

Nvd

Node

trendnettew-755ap_firmwareMatch1.13b01

AND

trendnettew-755apMatch-

VendorProductVersionCPE
trendnettew-755ap_firmware1.13b01cpe:2.3:o:trendnet:tew-755ap_firmware:1.13b01:*:*:*:*:*:*:*
trendnettew-755ap-cpe:2.3:h:trendnet:tew-755ap:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
trendnet	tew-755ap_firmware	1.13b01	cpe:2.3:o:trendnet:tew-755ap_firmware:1.13b01:::::::*
trendnet	tew-755ap	-	cpe:2.3:h:trendnet:tew-755ap:-:::::::*

References

brief-nymphea-813.notion.site/Vul7-TEW755-bof-setup_wizard_mydlink-7bb35b55f74a4d57bc5bc5d411ef8831

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.002

Percentile

61.9%

JSON

Related for CVE-2022-46588