CVE-2022-46591

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the reject_url parameter in the reject (sub_41BD60) function

Critical · published December 30, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
58.8
In the wild
Unconfirmed
What it is

🔥 A stack overflow lurking in TRENDnet TEW755AP could turn your device into a hacker's playground! Think of this stack overflow as a traffic jam on a busy street; one rogue vehicle (the attack) can cause a massive pile-up, blocking essential access and letting the bad guys slip through unnoticed! An attacker could exploit this vulnerability to crash the device or potentially execute arbitrary code. This means they could control your network equipment, snoop on your data, or even launch further attacks, leading to a nightmare scenario for your security!

Put simply

Think of this stack overflow as a traffic jam on a busy street; one rogue vehicle (the attack) can cause a massive pile-up, blocking essential access and letting the bad guys slip through unnoticed! The stack overflow occurs in the reject_url parameter within the reject function, allowing an attacker to send carefully crafted data that can overflow the stack, leading to unpredictable behavior or code execution.

What to do

An attacker could exploit this vulnerability to crash the device or potentially execute arbitrary code. This means they could control your network equipment, snoop on your data, or even launch further attacks, leading to a nightmare scenario for your security! Immediate action is critical! Upgrade to the latest firmware version 1.13B02 to patch this vulnerability. Additionally, review your device's configuration and monitor for any anomalous behavior. You've got this! Follow these steps and keep your network safe from potential attacks! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00882 · 58.8th percentile
Published
2022-12-30T00:00Z
EPSS history
Timeline
  • 30 DEC 00:00Z
    TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the reject_url parameter in the reject (sub_41BD60) function
    cvelistv5