Lucene search

K
nvd[email protected]NVD:CVE-2024-36729
HistoryJun 03, 2024 - 2:15 p.m.

CVE-2024-36729

2024-06-0314:15:09
web.nvd.nist.gov
cve-2024-36729
trendnet tew-827dru
stack-based buffer overflow
authenticated user
arbitrary code execution
posting
apply.cgi
action wizard_ipv6

7.8 High

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows an authenticated user to execute arbitrary code by POSTing to apply.cgi via the action wizard_ipv6 with a sufficiently long reboot_type key.

7.8 High

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

Related for NVD:CVE-2024-36729