CVE-2022-46596

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the del_num parameter in the icp_delete_img (sub_41DEDC) function

Critical · published December 30, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
58.8
In the wild
Unconfirmed
What it is

🔥 A stack overflow in the TRENDnet TEW755AP could let attackers crash your device with a single malicious input! Think of it as a restaurant where a customer orders more and more food until the kitchen just can't handle the chaos—eventually, it overflows into disaster! In this case, an attacker could exploit this stack overflow to cause unexpected crashes or potentially execute arbitrary code, leading to an absolute breakdown of your network device. Imagine a complete loss of control over your wireless network!

Put simply

Think of it as a restaurant where a customer orders more and more food until the kitchen just can't handle the chaos—eventually, it overflows into disaster! This vulnerability arises from the del_num parameter in the icp_delete_img function, which improperly handles user input, resulting in a stack overflow that could be triggered by sending specially crafted requests.

What to do

In this case, an attacker could exploit this stack overflow to cause unexpected crashes or potentially execute arbitrary code, leading to an absolute breakdown of your network device. Imagine a complete loss of control over your wireless network! To mitigate this risk, update your TRENDnet TEW755AP device to the latest firmware version. Additionally, consider disabling any remote management features to limit exposure until you're patched. Regularly audit device settings to enhance security! You've got this! Stay vigilant and secure your network with these steps! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00882 · 58.8th percentile
Published
2022-12-30T00:00Z
EPSS history
Timeline
  • 30 DEC 00:00Z
    TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the del_num parameter in the icp_delete_img (sub_41DEDC) function
    cvelistv5