CVE-2022-46598

2022-12-3021:15:10

CWE-78

[email protected]

web.nvd.nist.gov

trendnet tew755ap command injection action set_sta_enrollee_pin_5g

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.018

Percentile

88.2%

JSON

TRENDnet TEW755AP 1.13B01 was discovered to contain a command injection vulnerability via the wps_sta_enrollee_pin parameter in the action set_sta_enrollee_pin_5g function.

Affected configurations

Nvd

Node

trendnettew-755ap_firmwareMatch1.13b01

AND

trendnettew-755apMatch-

VendorProductVersionCPE
trendnettew-755ap_firmware1.13b01cpe:2.3:o:trendnet:tew-755ap_firmware:1.13b01:*:*:*:*:*:*:*
trendnettew-755ap-cpe:2.3:h:trendnet:tew-755ap:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
trendnet	tew-755ap_firmware	1.13b01	cpe:2.3:o:trendnet:tew-755ap_firmware:1.13b01:::::::*
trendnet	tew-755ap	-	cpe:2.3:h:trendnet:tew-755ap:-:::::::*