Lucene search
HistoryDec 30, 2022 - 9:15 p.m.
CVE-2022-46597
cve-2022-46597
trendnet
tew755ap
command injection
vulnerability
sys_service parameter
setup_wizard_mydlink
sub_4104b8 function
nvd
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.016 Low
EPSS
Percentile
87.4%
TRENDnet TEW755AP 1.13B01 was discovered to contain a command injection vulnerability via the sys_service parameter in the setup_wizard_mydlink (sub_4104B8) function.
Affected configurations
Node
trendnettew-755ap_firmwareMatch1.13b01
trendnettew-755apMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| trendnet:tew-755ap_firmware | trendnet tew-755ap firmware | eq | 1.13b01 |
Related
cnvd
cnvd
TRENDnet TEW-755AP Command Injection Vulnerability
2023-01-04 00:00:00
prion
prion
Command injection
2022-12-30 21:15:00
cvelist
cvelist
CVE-2022-46597
2022-12-30 00:00:00
nvd
nvd
CVE-2022-46597
2022-12-30 21:15:10
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.016 Low
EPSS
Percentile
87.4%
Related for CVE-2022-46597