CVE-2022-46590

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.netstat_rsname parameter in the tools_netstat (sub_41E730) function

Critical · published December 30, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
61.8
In the wild
Unconfirmed
What it is

🔥 A stack overflow vulnerability in TRENDnet TEW755AP could let an attacker take total control with just a crafted input! Think of it like a restaurant where one customer keeps ordering more than the kitchen can handle—eventually, the system collapses and chaos ensues. This overflow allows an attacker to push the device beyond its limits, leading to potential control over the entire network! If exploited, this vulnerability could allow an attacker to execute arbitrary code, gaining complete access to the device and potentially the network it's connected to. This means they could intercept traffic, alter settings, or even launch further attacks—absolutely devastating!

Put simply

Think of it like a restaurant where one customer keeps ordering more than the kitchen can handle—eventually, the system collapses and chaos ensues. This overflow allows an attacker to push the device beyond its limits, leading to potential control over the entire network! CVE-2022-46590 stems from a stack overflow in the tools_netstat function tied to the cameo.cameo.netstat_rsname parameter, which allows attackers to input excessive data that shifts memory and executes malicious code.

What to do

If exploited, this vulnerability could allow an attacker to execute arbitrary code, gaining complete access to the device and potentially the network it's connected to. This means they could intercept traffic, alter settings, or even launch further attacks—absolutely devastating! To protect your network, immediately update your TRENDnet TEW755AP to the latest firmware version that addresses this vulnerability. Regularly review your device settings and monitor for any unusual activity as a precaution. Your security is paramount! You've got this! With these steps, you'll secure your network and maintain your hero status! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00976 · 61.8th percentile
Published
2022-12-30T00:00Z
EPSS history
Timeline
  • 30 DEC 00:00Z
    TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.netstat_rsname parameter in the tools_netstat (sub_41E730) function
    cvelistv5