CVE-2022-46581

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.nslookup_target parameter in the tools_nslookup function

Critical · published December 30, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
58.8
In the wild
Unconfirmed
What it is

🚨 A stack overflow lurking in the TRENDnet TEW755AP could turn your network into a digital playground for attackers! 🔥 Think of this vulnerability like a train that gets overloaded and derails — the tools_nslookup function is that train, and the cameo.cameo.nslookup_target parameter is adding too much weight. Once it tips over, it can cause major chaos! If exploited, an attacker could potentially crash the device, gaining unauthorized access to your network. This could lead to an array of issues including data leaks or even remote control of the device, which is absolutely devastating!

Put simply

Think of this vulnerability like a train that gets overloaded and derails — the tools_nslookup function is that train, and the cameo.cameo.nslookup_target parameter is adding too much weight. Once it tips over, it can cause major chaos! This stack overflow vulnerability arises from improper handling of the cameo.cameo.nslookup_target parameter in the tools_nslookup function, leading to the potential for code execution if exploited.

What to do

If exploited, an attacker could potentially crash the device, gaining unauthorized access to your network. This could lead to an array of issues including data leaks or even remote control of the device, which is absolutely devastating! To safeguard your setup, immediately patch your TRENDnet TEW755AP to version 1.13B02 or later. Regularly check for updates and ensure that your network devices have the latest firmware installed. You've got this! Stay proactive and keep your network secure! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00882 · 58.8th percentile
Published
2022-12-30T00:00Z
EPSS history
Timeline
  • 30 DEC 00:00Z
    TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.nslookup_target parameter in the tools_nslookup function
    cvelistv5