PT-2024-27138 · Trendnet · Tew-827Dru

Published 2024-06-03 · Updated 2024-07-03 · CVE-2024-36729

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-827DRU versions 2.06B04 and earlier

Description The issue is a stack-based buffer overflow in the ssi binary, allowing an authenticated user to execute arbitrary code. This can be achieved by sending a POST request to "apply.cgi" via the action "wizard ipv6" with a sufficiently long reboot type key.

Recommendations For TRENDnet TEW-827DRU versions 2.06B04 and earlier, as a temporary workaround, consider restricting access to the "apply.cgi" endpoint to minimize the risk of exploitation. Avoid using the reboot type key in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2024-36729

Affected Products

Tew-827Dru

References · 6

• 🔥 https://github.com/HouseFuzz/reports/blob/main/trendnet/TEW827/wizard_ipv6/wizard_ipv6.md · Exploit
• https://osv.dev/vulnerability/CVE-2024-36729 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-36729 · Security Note
• https://t.me/cvenotify/81769 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1797668153511600617 · Twitter Post
• https://twitter.com/CVEnew/status/1797632794970976682 · Twitter Post