CVE-2022-46585

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the REMOTE_USER parameter in the get_access (sub_45AC2C) function

Critical · published December 30, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
58.8
In the wild
Unconfirmed
What it is

🔥 A stack overflow lurking in TRENDnet TEW755AP could spell disaster if exploited! Think of this vulnerability like a waiter who keeps serving endless drinks without checking the order — eventually, the system overflows with requests, and chaos ensues! An attacker could leverage this stack overflow to crash the device or potentially run arbitrary code, leading to a full compromise of the network. This level of control could allow for accessing sensitive information or disrupting services entirely — absolutely devastating!

Put simply

Think of this vulnerability like a waiter who keeps serving endless drinks without checking the order — eventually, the system overflows with requests, and chaos ensues! CVE-2022-46585 arises from a stack overflow via the REMOTE_USER parameter in the get_access function, making it ripe for exploitation if manipulated.

What to do

An attacker could leverage this stack overflow to crash the device or potentially run arbitrary code, leading to a full compromise of the network. This level of control could allow for accessing sensitive information or disrupting services entirely — absolutely devastating! Immediately patch your TRENDnet TEW755AP to version 1.13B02 or later to close this vulnerability. Regularly audit your network devices to ensure they are running the latest firmware and configurations. You've got this! With the right actions, you can secure your network and keep it running smoothly! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00882 · 58.8th percentile
Published
2022-12-30T00:00Z
EPSS history
Timeline
  • 30 DEC 00:00Z
    TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the REMOTE_USER parameter in the get_access (sub_45AC2C) function
    cvelistv5