PT-2019-13234 · Trendnet · Trendnet Tew-827Dru

Publicado 2019-07-09 · Atualizado 2020-08-24 · CVE-2019-13280

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-827DRU versions up to and including 2.04B03

Description The issue arises from a stack-based buffer overflow that occurs when the device returns an error message about failing to resolve a hostname during a ping or traceroute attempt. This allows an authenticated user to execute arbitrary code. The exploit can be exercised both on the local intranet or remotely if remote administration is enabled.

Recommendations For TRENDnet TEW-827DRU versions up to and including 2.04B03, update the firmware to a version later than 2.04B03 to resolve the issue. As a temporary workaround, consider disabling remote administration to minimize the risk of remote exploitation.

Exploit

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2019-13280

Produtos afetados

Trendnet Tew-827Dru

Referências · 3

• 🔥 https://github.com/fuzzywalls/TRENDNetExploits/tree/master/CVE-2019-13280 · Exploit
• https://osv.dev/vulnerability/CVE-2019-13280 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-13280 · Nota de Segurança