CVE-2023-24099

2023-01-2300:00:00

mitre

github.com

trendnet

easy-upgrader

tew-820ap

firmware

stack overflow

username parameter

arbitrary code

payload

vulnerability

maintenance.

AI Score

8.6

Confidence

High

EPSS

0.001

Percentile

46.0%

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the username parameter at /formWizardPassword. This vulnerability allows attackers to execute arbitrary code via a crafted payload. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:trendnet:tew-820ap_firmware:1.01.b01:*:*:*:*:*:*:*"
    ],
    "vendor": "trendnet",
    "product": "tew-820ap_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "1.01.b01"
      }
    ],
    "defaultStatus": "unknown"
  }
]