CVE-2022-46584

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the qcawifi.wifi%d_vap%d.maclist parameter in the kick_ban_wifi_mac_deny (sub_415D7C)…

Critical · published December 30, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
61.8
In the wild
Unconfirmed
What it is

🚨 A stack overflow lurking in your TRENDnet TEW755AP could let attackers crash the system with a single malicious parameter! 🔥 Think of it like a baggage handling system at an airport that collapses under the weight of too many oversized suitcases — one wrong entry could halt the entire operation! An attacker could exploit this vulnerability to crash the device, disrupting Wi-Fi services and potentially leading to a complete denial of network access. This could turn your smart home into a dumb one, leaving your devices in the lurch!

Put simply

Think of it like a baggage handling system at an airport that collapses under the weight of too many oversized suitcases — one wrong entry could halt the entire operation! This stack overflow occurs via the "qcawifi.wifi%d_vap%d.maclist" parameter in the "kick_ban_wifi_mac_deny" function, allowing an attacker to manipulate the input, leading to a potential overflow and system crash.

What to do

An attacker could exploit this vulnerability to crash the device, disrupting Wi-Fi services and potentially leading to a complete denial of network access. This could turn your smart home into a dumb one, leaving your devices in the lurch! Immediately update the TRENDnet TEW755AP to the latest firmware version available. Regularly review your network setup to monitor for vulnerabilities and ensure device configurations are secure. You've got this! Stay proactive, patch that firmware, and keep your network running smoothly! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00976 · 61.8th percentile
Published
2022-12-30T00:00Z
EPSS history
Timeline
  • 30 DEC 00:00Z
    TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the qcawifi.wifi%d_vap%d.maclist parameter in the kick_ban_wifi_mac_deny (sub_415D7C)…
    cvelistv5