PT-2019-13233 · Trendnet · Tew-827Dru

Published 2019-07-10 · Updated 2020-08-24 · CVE-2019-13279

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-827DRU versions up to and including 2.04B03

Description The issue arises from multiple stack-based buffer overflows that occur when the setup wizard processes user input. This allows an unauthenticated user to execute arbitrary code. The exploitation can happen both locally within the intranet and remotely if the remote administration feature is enabled.

Recommendations For TRENDnet TEW-827DRU versions up to and including 2.04B03, consider disabling remote administration until a fix is available to minimize the risk of remote exploitation. As a temporary workaround, restrict access to the setup wizard to prevent unauthenticated users from executing arbitrary code. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2019-13279

Affected Products

Tew-827Dru

References · 3

• 🔥 https://github.com/fuzzywalls/TRENDNetExploits/tree/master/CVE-2019-13279 · Exploit
• https://osv.dev/vulnerability/CVE-2019-13279 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-13279 · Security Note