PT-2022-27919 · Trendnet · Trendnet Tew755Ap

Published 2022-12-30 · Updated 2023-01-05 · CVE-2022-46591

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TRENDnet TEW755AP version 1.13B01

Description A stack overflow issue was discovered via the reject url parameter in the reject (sub 41BD60) function. This issue affects the specified version of the TRENDnet TEW755AP.

Recommendations For TRENDnet TEW755AP version 1.13B01, avoid using the reject url parameter in the affected function until a fix is available. As a temporary workaround, consider restricting access to the reject (sub 41BD60) function to minimize the risk of exploitation.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2022-46591

Affected Products

Trendnet Tew755Ap

References · 4

• 🔥 https://brief-nymphea-813.notion.site/Vul2-TEW755-bof-reject-0ed4829f416d4d2b86a3bce6792cab95 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-46591 · Security Note
• https://osv.dev/vulnerability/CVE-2022-46591 · Vendor Advisory
• https://t.me/cibsecurity/55599 · Telegram Post