2505 matches found
Stack overflow
TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wpsstaenrolleepin parameter in the action setstaenrolleepin24g function...
CVE-2022-46583
TRENDnet TEW755AP devices with firmware 1.13B01 expose a stack overflow via the reboot_type input in the wizard_ipv6 (sub_41C380) function, caused by insufficient input size checking. Affected component: reboot_type handling in wizard_ipv6; underlying root cause: lack of proper size validation. I...
CVE-2022-46590
TRENDnet TEW755AP 1.13B01 is affected by a stack overflow in the tools_netstat (sub_41E730) function, triggered by the cameo.cameo.netstat_rsname parameter. The issue arises from insufficient input data size checking, allowing potential remote code execution via a network vector (CVSSv3.1: 9.8, C...
CVE-2022-46597
TRENDnet TEW755AP 1.13B01 was discovered to contain a command injection vulnerability via the sysservice parameter in the setupwizardmydlink sub4104B8 function...
CVE-2022-46589: Out-of-bounds Write
TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.netstatoption parameter in the toolsnetstat sub41E730 function...
CVE-2022-46581
Consolidated data for CVE-2022-46581: affected product is TRENDnet TEW755AP router, firmware version 1.13B01. Root cause is a lack of input size checking in the cameo.nslookup_target parameter of the tools_nslookup function, causing a stack overflow that could lead to arbitrary code execution. Pu...
CVE-2022-46591
CVE-2022-46591 affects TRENDnet TEW755AP 1.13B01. A stack overflow is triggered by the reject_url input in the reject (sub_41BD60) function. Impact: potential arbitrary code execution on the device (high/critical ratings; CVSS v3.1: 9.8). Exploitation: PoC exists; attack vector is network with no...
CVE-2022-46585
CVE-2022-46585 affects TRENDnet TEW755AP 1.13B01. The vulnerability is a stack overflow triggered by the REMOTE_USER parameter in the get_access (sub_45AC2C) function. Impact in public CVSS records indicates high severity (CRITICAL) with network attack vector, no user interaction, and full confid...
TRENDnet TEW-755AP 缓冲区错误漏洞
The TRENDnet TEW-755AP is a router from TRENDnet. The TRENDnet TEW-755AP suffers from a stack overflow vulnerability that stems from a lack of size checking of input data in the REMOTEUSER parameter of the getaccess sub45AC2C function, which can be exploited by an attacker to execute arbitrary co...
CVE-2022-46601
TRENDnet TEW755AP router firmware 1.13B01 contains a stack overflow in icp_setbg_img (sub_41DD68) via the setbg_num parameter. CVE-2022-46601, CVSS v3.1 base score 9.8 (CRITICAL) with network attack vector, no user interaction, and high impact to confidentiality, integrity, and availability. Conn...
CVE-2022-46588
TRENDnet TEW755AP 1.13B01 is affected by a stack overflow in the setup_wizard_mydlink function (sub_4104B8) via the sys_service parameter due to insufficient input size checking. This vulnerability can enable arbitrary code execution on the device if exploited over the network. The CVE entry has ...
TRENDnet TEW-755AP 缓冲区错误漏洞
The TRENDnet TEW-755AP is a router from TRENDnet. The TRENDnet TEW-755AP suffers from a stack overflow vulnerability that stems from a lack of size checking of input data in the wpsstaenrolleepin parameter in the setstaenrolleepin24g function, which can be exploited by an attacker to execute...
PT-2022-27911 · Trendnet · Trendnet Tew755Ap
Name of the Vulnerable Software and Affected Versions: TRENDnet TEW755AP version 1.13B01 Description: A stack overflow issue was discovered via the reboot type parameter in the wizard ipv6 function, specifically in the sub 41C380 function. Recommendations: For TRENDnet TEW755AP version 1.13B01,...
CVE-2022-46585: Out-of-bounds Write
TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the REMOTEUSER parameter in the getaccess sub45AC2C function...
CVE-2022-46581: Out-of-bounds Write
TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.nslookuptarget parameter in the toolsnslookup function...
CVE-2022-46588
TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the sysservice parameter in the setupwizardmydlink sub4104B8 function...
CVE-2022-46597
TRENDnet TEW755AP 1.13B01 was discovered to contain a command injection vulnerability via the sysservice parameter in the setupwizardmydlink sub4104B8 function...
PT-2022-27908 · Trendnet · Trendnet Tew755Ap
Name of the Vulnerable Software and Affected Versions: TRENDnet TEW755AP version 1.13B01 Description: A stack overflow issue was discovered, related to the wifi captive portal function, specifically via the user edit page parameter. Recommendations: For TRENDnet TEW755AP version 1.13B01, consider...
CVE-2022-46593
TRENDnet TEW755AP router (firmware 1.13B01) is affected by a stack overflow in the do_sta_enrollee_wifi function due to improper handling of the wps_sta_enrollee_pin input. This vulnerability can be triggered via the network attack vector and, per multiple sources, may allow an attacker to execut...