PT-2019-13233 · Trendnet · Tew-827Dru

Publicado 2019-07-10 · Atualizado 2020-08-24 · CVE-2019-13279

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-827DRU versions up to and including 2.04B03

Description The issue arises from multiple stack-based buffer overflows that occur when the setup wizard processes user input. This allows an unauthenticated user to execute arbitrary code. The exploitation can happen both locally within the intranet and remotely if the remote administration feature is enabled.

Recommendations For TRENDnet TEW-827DRU versions up to and including 2.04B03, consider disabling remote administration until a fix is available to minimize the risk of remote exploitation. As a temporary workaround, restrict access to the setup wizard to prevent unauthenticated users from executing arbitrary code. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2019-13279

Produtos afetados

Tew-827Dru

Referências · 3

• 🔥 https://github.com/fuzzywalls/TRENDNetExploits/tree/master/CVE-2019-13279 · Exploit
• https://osv.dev/vulnerability/CVE-2019-13279 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-13279 · Nota de Segurança