Lucene search
PRIOn knowledge basePRION:CVE-2024-0919HistoryJan 26, 2024 - 9:15 a.m.
Command injection
2024-01-2609:15:00
PRIOn knowledge base
www.prio-n.com
3
command injection
critical
post request handler
remote attack
exploit
vdb-252123
disclosure
A vulnerability was found in TRENDnet TEW-815DAP 1.0.2.0. It has been classified as critical. This affects the function do_setNTP of the component POST Request Handler. The manipulation of the argument NtpDstStart/NtpDstEnd leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252123. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
| CPE | Name | Operator | Version |
|---|---|---|---|
| tew-815dap_firmware | eq | 1.0.2.0 |
Related
cve
cve
CVE-2024-0919
2024-01-26 09:15:08
cvelist
cvelist
CVE-2024-0919 TRENDnet TEW-815DAP POST Request do_setNTP command injection
2024-01-26 08:08:35
nvd
nvd
CVE-2024-0919
2024-01-26 09:15:08