Lucene search

K

Tv-Ip1314Pi Firmware Security Vulnerabilities

cve
cve

CVE-2023-49235

An issue was discovered in libremote_dbg.so on TRENDnet TV-IP1314PI 5.5.3 200714 devices. Filtering of debug information is mishandled during use of popen. Consequently, an attacker can bypass validation and execute a shell command.

9.8CVSS

9.3AI Score

0.001EPSS

2024-01-09 09:15 AM
14
cve
cve

CVE-2023-49236

A stack-based buffer overflow was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices, leading to arbitrary command execution. This occurs because of lack of length validation during an sscanf of a user-entered scale field in the RTSP playback function of davinci.

9.8CVSS

9.8AI Score

0.002EPSS

2024-01-09 09:15 AM
14
cve
cve

CVE-2023-49237

An issue was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices. Command injection can occur because the system function is used by davinci to unpack language packs without strict filtering of URL strings.

9.8CVSS

9.6AI Score

0.001EPSS

2024-01-09 09:15 AM
39