PT-2019-13231 · Trendnet · Tew-827Dru

Publicado 2019-07-09 · Atualizado 2020-08-24 · CVE-2019-13277

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-827DRU versions up to and including 2.04B03

Description The issue allows an unauthenticated attacker to execute setup wizard functionality, potentially leading to a denial of service. This can be done on the local intranet or remotely if remote administration is enabled.

Recommendations For versions up to and including 2.04B03, consider disabling remote administration to minimize the risk of exploitation. As a temporary workaround, restrict access to the setup wizard functionality until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2019-13277

Produtos afetados

Tew-827Dru

Referências · 3

• 🔥 https://github.com/fuzzywalls/TRENDNetExploits/tree/master/CVE-2019-13277 · Exploit
• https://osv.dev/vulnerability/CVE-2019-13277 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-13277 · Nota de Segurança