CVE-2022-46586

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the qcawifi.wifi%d_vap%d.maclist parameter in the kick_ban_wifi_mac_allow (sub_415B00)…

Critical · published December 30, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
61.8
In the wild
Unconfirmed
What it is

🔥 A single parameter is enough to trigger a stack overflow in TRENDnet TEW755AP 1.13B01—it's like trying to stuff an entire Thanksgiving turkey into a lunchbox! Think of it like overpacking a suitcase; if you try to squeeze in too much, it can burst open and spill everywhere. In this case, the qcawifi.wifi%d_vap%d.maclist parameter is overflowing and causing the device to crash unexpectedly. If exploited, this vulnerability can lead to a complete denial of service, rendering your device useless. An attacker could potentially crash the system at will, creating chaos in your network and leaving you vulnerable to further attacks. This could be absolutely devastating if your network handles critical operations!

Put simply

Think of it like overpacking a suitcase; if you try to squeeze in too much, it can burst open and spill everywhere. In this case, the qcawifi.wifi%d_vap%d.maclist parameter is overflowing and causing the device to crash unexpectedly. This stack overflow vulnerability occurs in the kick_ban_wifi_mac_allow function, where an attacker can exploit the qcawifi.wifi%d_vap%d.maclist parameter to manipulate memory and crash the device.

What to do

If exploited, this vulnerability can lead to a complete denial of service, rendering your device useless. An attacker could potentially crash the system at will, creating chaos in your network and leaving you vulnerable to further attacks. This could be absolutely devastating if your network handles critical operations! Immediately patch your TRENDnet TEW755AP to the latest firmware version to mitigate this risk. It's also wise to perform a thorough audit of your network devices to ensure no similar vulnerabilities exist. Stay vigilant! You've got this! Secure your network now, and you'll have peace of mind in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00976 · 61.8th percentile
Published
2022-12-30T00:00Z
EPSS history
Timeline
  • 30 DEC 00:00Z
    TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the qcawifi.wifi%d_vap%d.maclist parameter in the kick_ban_wifi_mac_allow (sub_415B00)…
    cvelistv5