Lucene search
HistoryJan 26, 2024 - 8:15 a.m.
CVE-2024-22545
cve-2024-22545
trendnet
tew-824dru
version 1.04b01
command injection
vulnerability
nvd
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
5.1%
An issue was discovered in TRENDnet TEW-824DRU version 1.04b01, allows unauthenticated attackers to execute arbitrary code via the system.ntp.server parameter in the sub_420AE0() function. The attack can be launched remotely.
Affected configurations
Node
trendnettew-824dru_firmwareMatch1.04b01
trendnettew-824druMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| trendnet:tew-824dru_firmware | trendnet tew-824dru firmware | eq | 1.04b01 |
Related
prion
prion
Design/Logic Flaw
2024-01-26 08:15:00
nvd
nvd
CVE-2024-22545
2024-01-26 08:15:42
cvelist
cvelist
CVE-2024-22545
2024-01-26 00:00:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2024-22545