PT-2023-16414 · Trendnet · Trendnet Tew-811Dru

Leetsun · CVE-2023-0637 · Publicado 2023-02-02 · Atualizado 2024-05-17

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-811DRU version 1.0.10.0

Description A critical issue was found in the Web Management Interface of the TRENDnet TEW-811DRU, specifically affecting an unknown part of the file wan.asp. This issue leads to memory corruption and can be initiated remotely. The exploit has been disclosed to the public and may be used. There are elevated activities targeting this issue.

Recommendations For TRENDnet TEW-811DRU version 1.0.10.0, consider disabling access to the wan.asp file in the Web Management Interface as a temporary workaround until a patch is available. Restrict access to the Web Management Interface to minimize the risk of exploitation.

Exploit

Correção

Memory Corruption

Buffer Overflow

Enumeração de Fraquezas

CWE-787

CWE-119

Identificadores relacionados

CVE-2023-0637

Produtos afetados

Trendnet Tew-811Dru

Referências · 7

• 🔥 https://vuldb.com/?id.220017 · Exploit
• https://osv.dev/vulnerability/CVE-2023-0637 · Aviso do Fabricante
• https://t.me/cibsecurity/57383 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-0637 · Nota de Segurança
• https://twitter.com/vuldb/status/1711168359189082387 · Publicação no Twitter
• https://vuldb.com/?ctiid.220017 · Nota
• https://t.me/cvenotify/43430 · Publicação no Telegram