PT-2023-16414 · Trendnet · Trendnet Tew-811Dru

Leetsun · Published 2023-02-02 · Updated 2024-05-17 · CVE-2023-0637

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-811DRU version 1.0.10.0

Description A critical issue was found in the Web Management Interface of the TRENDnet TEW-811DRU, specifically affecting an unknown part of the file wan.asp. This issue leads to memory corruption and can be initiated remotely. The exploit has been disclosed to the public and may be used. There are elevated activities targeting this issue.

Recommendations For TRENDnet TEW-811DRU version 1.0.10.0, consider disabling access to the wan.asp file in the Web Management Interface as a temporary workaround until a patch is available. Restrict access to the Web Management Interface to minimize the risk of exploitation.

Exploit

Fix

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-119

Related Identifiers

CVE-2023-0637

Affected Products

Trendnet Tew-811Dru

References · 7

• 🔥 https://vuldb.com/?id.220017 · Exploit
• https://osv.dev/vulnerability/CVE-2023-0637 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-0637 · Security Note
• https://t.me/cibsecurity/57383 · Telegram Post
• https://twitter.com/vuldb/status/1711168359189082387 · Twitter Post
• https://vuldb.com/?ctiid.220017 · Note
• https://t.me/cvenotify/43430 · Telegram Post