CVE-2022-46583

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the reboot_type parameter in the wizard_ipv6 (sub_41C380) function

Critical · published December 30, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
58.8
In the wild
Unconfirmed
What it is

🚨 A stack overflow lurking in the TRENDnet TEW755AP could turn your router into a playground for attackers! 🔥 Think of it like a crowded elevator that suddenly overloads – it's not just annoying, but it could cause the whole system to crash, and in this case, unsuspecting users might be left vulnerable to nefarious activities. An attacker exploiting this vulnerability could execute arbitrary code, effectively taking control of your router! This could lead to unauthorized access to your network, compromising everything from personal data to smart home devices – absolutely devastating!

Put simply

Think of it like a crowded elevator that suddenly overloads – it's not just annoying, but it could cause the whole system to crash, and in this case, unsuspecting users might be left vulnerable to nefarious activities. The stack overflow occurs via the 'reboot_type' parameter in the 'wizard_ipv6' function, allowing an attacker to manipulate the call stack and execute arbitrary code due to insufficient input validation.

What to do

An attacker exploiting this vulnerability could execute arbitrary code, effectively taking control of your router! This could lead to unauthorized access to your network, compromising everything from personal data to smart home devices – absolutely devastating! To protect your network, immediately upgrade the TRENDnet TEW755AP to the latest firmware version to close this security gap. Regularly check for firmware updates and enable security features like firewalls and strong passwords for extra protection. You've got this! Follow these steps and you'll keep your network safe and sound. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00882 · 58.8th percentile
Published
2022-12-30T00:00Z
EPSS history
Timeline
  • 30 DEC 00:00Z
    TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the reboot_type parameter in the wizard_ipv6 (sub_41C380) function
    cvelistv5